By default, all clusters added to Carbon Black EDR Unified View by an administrator are enabled for all users who have a legitimate shared or individual API token. However, each user can limit their global searches to a particular set of clusters by disabling some clusters.
To customize global searches:
-
On the Username menu in the upper right corner of the console, click My Profile.
-
Click the My Clusters link.
-
Click to enable (include) or disable (exclude) clusters.
