Carbon Black: Missing Fields in Event/Alert Search and Data Forwarder

Monitoring
Monitoring

We have implemented a fix. We will now monitor the service for stability and provide updates as soon as new information becomes available.

Investigating

We are aware that some Carbon Black Endpoint Standard, Enterprise EDR, and Data Forwarder customers are currently experiencing few missing fields (with parent_ prefix) in event search, alert search & data forwarder.

Our team has identified the root cause of this issue and is actively working on a fix. We will provide further updates as more information becomes available.

Began at:

Affected components
  • Carbon Black
    • DATA FORWARDER
      • US
        • Alert Forwarder
        • Data Forwarder Configuration API
        • Event Forwarder
      • EU
        • Alert Forwarder
        • Data Forwarder Configuration API
        • Event Forwarder
      • SYD
        • Alert Forwarder
        • Data Forwarder Configuration API
        • Event Forwarder
      • JAPAN
        • Alert Forwarder
        • Data Forwarder Configuration API
        • Event Forwarder
    • ENDPOINT STANDARD / PREVENTION
      • US 1
        • Event Processing
      • US 2
        • Event Processing
      • US 5
        • Event Processing
      • EU
        • Event Processing
      • SYD
        • Event Processing
      • JAPAN
        • Event Processing
    • ENTERPRISE EDR
      • US
        • Enterprise EDR Event Processing
      • EU
        • Enterprise EDR Event Processing
      • SYD
        • Enterprise EDR Event Processing
      • JAPAN
        • Enterprise EDR Event Processing