Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Carbon Black Cloud: Sensors unexpectedly moved to group after modifying Criteria to Any

Carbon Black Cloud: Sensors unexpectedly moved to group after modifying Criteria to Any

Environment

  • Carbon Black Cloud Console: All Versions

Symptoms

Many sensors unexpectedly move into a group recently modified to match 'Any' criteria when OS version is also specified

Cause

When an Operating System and the 'Any' logic is applied, the group will catch any endpoints that contain the particular operating system or any of the other criteria specified. 

Resolution

In order to filter by specific OS, but meet the other criteria of a group, the second piece of logic must be set to meet 'All' 
 

Additional Notes

If a particular OS is set to match All Versions, a logical AND operator will be used with the rest of the criteria regardless of if the other criteria is using 'All' or 'Any'

Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎07-14-2022
Views:
183
Contributors