Environment
- Endpoint Standard Sensor: All Supported Versions
- Carbon Black Cloud Console: All Versions
- Enterprise EDR Sensor: All Supported Versions
Question
Why Is There A Decrease In Events To S3 Bucket When Disabling Endpoint Standard In an Org?
Answer
This is normal to see drop in logging to S3 bucket when disabling a feature in the product. Endpoint Standard records a significant amount of data which explains the drop in events.