Environment
- Carbon Black Cloud Console: All Versions
Symptoms
Many sensors unexpectedly move into a group recently modified to match 'Any' criteria when OS version is also specified
Cause
When an Operating System and the 'Any' logic is applied, the group will catch any endpoints that contain the particular operating system or any of the other criteria specified.
Resolution
In order to filter by specific OS, but meet the other criteria of a group, the second piece of logic must be set to meet 'All'
Additional Notes
If a particular OS is set to match All Versions, a logical AND operator will be used with the rest of the criteria regardless of if the other criteria is using 'All' or 'Any'