Failed to Write to Event Forwarder Config File [Errno 13] Permission denied
search cancel

Failed to Write to Event Forwarder Config File [Errno 13] Permission denied

book

Article ID: 284972

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

When enabling the cb-event-forwarder in the UI, an error message is seen
Failed to write to Event Forwarder config File [Errno 13] Permission denied: '/etc/cb/integrations/event-forwarder/cb-event-forwarder.conf'

 

Environment

  • Carbon Black EDR Console: 7.1.0 and Higher
  • Carbon Black Event Forwarder: 3.6.2 and Higher

Cause

Permissions are incorrect on the backend for the cb user to access the event forwarder files. 

Resolution

  1. Run this script:
    sudo sh /usr/share/cb/integrations/event-forwarder/cb-edr-fix-permissions.sh
  2. Check to see if the permissions errors are now resolved in the console

Additional Information