Hosted EDR - Unable to update solr document due to parsing error


The fix is applied successfully on the hosted EDR servers. The issue is now resolved.


Fix has been applied on hosted EDR servers.


The issue has been identified. The changes to handle parsing for forward slash will be reverted on hosted EDR servers. This will required service restart.


Description: Hosted EDR observing an issue of forward slash filter not able to parse tokens for command line executions. We may need a service restart depending on the investigation.

Security Impact: Security efficacy is not compromised due to this issue.

Next Update: 30 minutes or upon earlier status change

For any incident updates please visit

We thank you for your patience as we identify and resolve the issue.

VMware Carbon Black Team

Began at:

Affected components