Failed to Write to Event Forwarder Config File [Errno 13] Permission denied
book
Article ID: 284972
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
When enabling the cb-event-forwarder in the UI, an error message is seen
Failed to write to Event Forwarder config File [Errno 13] Permission denied: '/etc/cb/integrations/event-forwarder/cb-event-forwarder.conf'
Environment
- Carbon Black EDR Console: 7.1.0 and Higher
- Carbon Black Event Forwarder: 3.6.2 and Higher
Cause
Permissions are incorrect on the backend for the cb user to access the event forwarder files.
Resolution
- Run this script:
sudo sh /usr/share/cb/integrations/event-forwarder/cb-edr-fix-permissions.sh
- Check to see if the permissions errors are now resolved in the console
Feedback
thumb_up
Yes
thumb_down
No