Environment
- Carbon Black Cloud Console: All Versions
- Enterprise EDR
- Endpoint Standard
Question
Why are enriched events missing on RHEL 8 devices?
Answer
Enriched events come from the Endpoint Standard data stream. At the current time (sensor 2.10.1) RHEL 8 is only supported for Enterprise EDR and Audit & Remediation. A future release will be adding this functionality.
