EDR: How to Move Multiple Sensors into a New Sensor Group via Python API

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

A simple script that allows a user to provide a comma delimited csv or text file that includes the hostname and new group

Environment

• EDR: All Versions
• API

Resolution

1. Download the python file and place it on the host that has cbapi installed. batch_sensor_group.py
2. Create a text or csv file that has hostname and the new group in comma delimited format

   hostname1, My server group
   hostname2, Default Group

3. Run the script

   batch_sensor_group.py -f <file_location>

Additional Information

• This script provides a basic function of moving sensors into new groups. Additional features should be added by the user
• Always make sure cbapi is up to date. All Products: How to Update CbAPI
• For more example scripts:
  • https://github.com/carbonblack/cbapi-python/tree/master/examples/response
  • https://github.com/cbcommunity/cbapi-examples