This topic introduces you to Carbon Black EDR Unified View and explains basic concepts. OverviewCarbon Black EDR Unified View provides a single interface for process and binary searches across multiple Carbon Black EDR clusters, returning a unified set of results. ArchitectureCarbon Black EDR Unified View runs on a separate server from the Carbon Black EDR clusters it manages. It provides a graphical front end that does the following: TerminologyThis document uses the following terms: LoggingCarbon Black EDR Unified View rotates log files on a daily basis and stores them for 7 days. The server generates logs from two sources: Setup SummaryThe following steps set up and use Carbon Black EDR Unified View. They are described in detail elsewhere in this document.
