Live Query is disabled by default. Carbon Black EDR Global Administrators and Carbon Black Hosted EDR Administrators can enable or disable Live Query.

Procedure

  1. Click Username > Settings > Advanced Settings.
  2. Check the Enable Live Query checkbox to enable Live Query, or uncheck the checkbox to disable it.
  3. Confirm your selection.
  4. Click Save Changes.