Observations is the default Investigate view for Carbon Black Cloud Endpoint Standard and Carbon Black XDR customers. This page is also visible for Carbon Black Cloud Enterprise EDR customers who have Carbon Black Cloud Endpoint Standard or Carbon Black XDR.

Note:
  • This section provides a general description of the Observations page. For information about XDR-specific data, see Exploring XDR Data on the Observations Page.
  • For Carbon Black Cloud Endpoint Standard customers who do not also have Carbon Black Cloud Enterprise EDR, Observations is the default page view.

On the left navigation pane, click Investigate > Observations.

Image of Observations tab on the Investigate page
Tip: You can also use the Observations API to search through all Observations to find one or more specific Observations that match the search criteria.