Carbon Black Cloud: When is the Observations (or Enriched Events) feature available in a Carbon Black Cloud Web Console?

[#1]

Environment

• Carbon Black Cloud Web Console: All supported versions
  • Enterprise EDR
    • XDR Add-On
  • Endpoint Standard

Question

When is the Observations (or Enriched Events) feature available in a Carbon Black Cloud Console?

Answer

When either of the following products are enabled for a CBC product instance:

• Endpoint Standard
• Enterprise EDR + XDR

Additional Notes

• The XDR Add-On is required for Observations to be available in Enterprise EDR orgs
• Observations became the default option in March 2023, as announced here
• This was formerly Enriched Events but Enriched Events is still available to be toggled to until fall 2023 (date to be determined)

Related Content

Carbon Black Cloud Console Release Notes
Observations is now the default view on CBC Investigate page 
CB PSC: What are Enriched Events?
Carbon Black Cloud: How to Search for Enriched Events