Default Time Range Setting Change for V6 Alerts API
Posted on September 3, 2021
In order to improve the resilience and stability of the VMware Carbon Black Cloud, we are setting the default time range setting of the V6 Alerts API to one month. If no time range is specified in the search request, the API will search through the past one month of data instead of searching through all alerts. Affected routes include _search, _facet, and workflow/_criteria. This change will take effect starting Wednesday, October 20th. It will result in faster API response times on average and reduces the chance of degraded service.
Customers will still have the option to specify longer time ranges or search through their entire history of alerts by using the range field when filtering by create_time, last_update_time, first_event_time, or last_event_time criteria. Specifying all as your desired range will search all available alerts.
If there are any concerns about this change, please reach out to us.