Environment
- EDR Console: All Versions
Symptoms
When doing a process search, not all facets are displayed such as hostname when it is seen on another page.
Cause
Facets are expensive and in order to make sure the search page displays results as quickly as possible, a timeout is built in and returns the results captured during that time.
Resolution
For servers that have enough resources, threading can be added to return more results quicker.
- Open /etc/cb/cb.conf for editing
- Add the following config into the file
CoreServicesMaxFacetThreads=1
- Restart services EDR: How to Restart Server Services
