By default, the notifier, displayed when files are blocked on an agent computer, includes the Carbon Black logo. Also, you have the option of having no logo on a notifier, or to provide a custom logo. Logos are specified on a per-notifier basis.

  • If you create and configure a custom notifier logo, it appears only on Windows systems. For Linux and Mac endpoints, you can either display the Carbon Black logo or no logo.
  • Pre-7.0.0 implementations of a custom logo, including both special solutions provided by Carbon Black Support and the standard customization available in Bit9 Parity 6.0.2, are not maintained when you upgrade to this release. You must use the method below to implement custom logos. If you specified a custom logo in v7.0.0 or later, that will be maintained on upgrade.
  • Pre-6.0.2 App Control Agents will not display a newly configured custom logo until they are upgraded.


  1. On the console menu, navigate to the Rules > Notifiers page.
  2. On the Notifiers page, either.
    • Click Add Notifier if you are creating a new notifier. The Add Notifier page appears.
    • Click the View Details button next to the name of an existing notifier you want to edit. The Edit Notifier page appears.
  3. From the Notification Logo drop-down menu, select Custom.
    A text box appears next to the menu.

    An additional field for pointing to the custom logo location.

  4. Enter the location of the file containing the logo you want to use.
    You have three options for specifying the location of the logo file:
    • UNC: You can provide a network-based path specification to the logo file in the form \\server\share\path\imagefile.gif. The Carbon Black App Control Agent attempts to make a local copy. If the file cannot be downloaded, the agent will continue to use the prior image (for example, the default Carbon Black image) until the new image can be obtained. The agent continues to attempt to download the image once per hour until the image is successfully downloaded or the image is explicitly changed or disabled.
      Note: The LocalSystem account must have access to the UNC path you provide for the image to be accessible on agent computers. Also, you must not put the logo in a location that requires a password for access.
    • URL: You can specify a web-based path in the form http://path/imagefile.gif. This path should be accessible to the App Control Agent process and allow anonymous, unauthenticated access. The Carbon Black App Control Agent makes a local copy of this file as described above.
    • Local: You can specify a local file path (on the local computer) in the form d:\path\imagefile.gif. The target file must be locally accessible to the Carbon Black App Control Agent process. You must put the logo file on each agent computer that will use it. Any updates to this file take place the next time the notifier is displayed. If the specified path is not accessible, the Carbon Black logo is displayed instead and an event is generated once per Carbon Black App Control Agent session, just as with non-local paths.
  5. To keep the changes, click Save.
  6. Repeat the steps above for each notifier whose logo you want to change.