CB Response: Failed to Write to Event Forwarder Config File [Errno 13] Permission denied
search cancel

CB Response: Failed to Write to Event Forwarder Config File [Errno 13] Permission denied

book

Article ID: 284972

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

When enabling the cb-event-forwarder in the UI, an error message is seen
Failed to write to Event Forwarder config File [Errno 13] Permission denied: '/etc/cb/integrations/event-forwarder/cb-event-forwarder.conf'

 

Environment

  • Carbon Black Response Console: 7.1.0 and Higher
  • Carbon Black Event Forwarder: 3.6.2 and Higher

Cause

Incorrect permissions on the back-end

Resolution

  1. Download the following file and place it on the backend server
  2. Run
    sudo sh /usr/share/cb/integrations/event-forwarder/cb-edr-fix-permissions.sh