By default, all clusters added to Carbon Black EDR Unified View by an administrator are enabled for all users who have a legitimate shared or individual API token. However, each user can limit their global searches to a particular set of clusters by disabling some clusters.

To customize global searches:

  1. On the Username menu in the upper right corner of the console, click My Profile.

  2. Click the My Clusters link.

  3. Click to enable (include) or disable (exclude) clusters.