Environment
- Carbon Black Cloud Console: All Versions
- Audit & Remediation (Formerly CB LiveOps)
- Endpoint Standard (Formerly CB Defense)
- Enterprise EDR (Formerly CB ThreatHunter)
- Carbon Black Cloud Windows Sensor: All Versions
- US Backend (Prod05)
Symptoms
VDI endpoints are auto-deregistered despite recent events being searchable in the Investigate page.
Cause
A data pipeline bottleneck is preventing the Last Check-In time from being properly updated.
Resolution
Increase the Auto Deregistration time to Greater than 1 Hour.
Additional Notes
Future enhancements to the US Backend will resolve the bottleneck.
Related Content