Hosted EDR - Unable to update solr document due to parsing error

Resolved
Resolved

The fix is applied successfully on the hosted EDR servers. The issue is now resolved.

Recovering

Fix has been applied on hosted EDR servers.

Identified

The issue has been identified. The changes to handle parsing for forward slash will be reverted on hosted EDR servers. This will required service restart.

Investigating

Description: Hosted EDR observing an issue of forward slash filter not able to parse tokens for command line executions. We may need a service restart depending on the investigation.

Security Impact: Security efficacy is not compromised due to this issue.

Next Update: 30 minutes or upon earlier status change

For any incident updates please visit https://status.carbonblack.com/

We thank you for your patience as we identify and resolve the issue.

VMware Carbon Black Team

Began at: