This topic describes the available actions in a multi-cluster context.

Process and binary searches in multi-cluster context apply to all data that all included clusters in Carbon Black EDR Unified View provide. Included clusters are those that are connected in Cluster Management for each Carbon Black EDR Unified View user. Included data from each cluster depends on the permissions provided by the cluster API token for the user.

Carbon Black EDR operations in Carbon Black EDR Unified View multi-cluster context are similar to being logged directly into a single instance of Carbon Black EDR, with some exceptions. For example, the Sensor Details page is unavailable in multi-cluster context, but if you click on a sensor name in multi-cluster search results, a single-cluster view opens in a separate tab and show the Sensor Details page on the cluster to which the sensor reports.