IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

Enterprise EDR: Error Creating Threat Report "Search fields are required to add queries to a watchlist report. To learn more, see the Search Guide"

Enterprise EDR: Error Creating Threat Report "Search fields are required to add queries to a watchlist report. To learn more, see the Search Guide"

Environment

  • Enteprise EDR Web Console: All Versions

Symptoms

  • The following error is observed when selecting Add search to threat report on the investigate page
    • Search fields are required to add queries to a watchlist report. To learn more, see the Search Guide
  • Investigate page search query contains special characters

Cause

This issue is caused by improperly escaped special characters in a search query

Resolution

Ensure search queries are properly escaped. More information on special characters and escaping can be found in the Advanced search tips for CBC Platform Search article linked in the Related Content section

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎05-17-2021
Views:
329