Carbon Black Cloud: When is the Observations (or Enriched Events) feature available in a Carbon Black Cloud Web Console?

[#1]

Environment

• Carbon Black Cloud Web Console: All supported versions
  • Enterprise EDR
    • XDR Add-On
  • Endpoint Standard

Question

When is the Observations (or Enriched Events) feature available in a Carbon Black Cloud Console?

Answer

When either of the following products are enabled for a CBC product instance:

• Endpoint Standard
• Enterprise EDR + XDR

Additional Notes

• The XDR Add-On is required for Observations to be available in Enterprise EDR orgs
• Observations replaced Enriched Events in September of 2023

Related Content

Carbon Black Cloud Console Release Notes
Observations is now the default view on CBC Investigate page