The available actions in multi-cluster context are as follows:
- Cluster management – See Managing Clusters.
- Process search and process analysis – See Process Search.
- Binary search and binary details – See Binary Search.
- User management – See Managing Users.
Process and binary searches in multi-cluster context apply to all data that all included clusters in Carbon Black EDR Unified View provide. Included clusters are those that are connected in Cluster Management for each Carbon Black EDR Unified View user. Included data from each cluster depends on the permissions provided by the cluster API token for the user.
Carbon Black EDR operations in Carbon Black EDR Unified View multi-cluster context are similar to being logged directly into a single instance of Carbon Black EDR, with some exceptions. For example, the Sensor Details page is unavailable in multi-cluster context, but if you click on a sensor name in multi-cluster search results, a single-cluster view opens in a separate tab and show the Sensor Details page on the cluster to which the sensor reports.
