EDR: Event Forwarder service does not start at boot
search cancel

EDR: Event Forwarder service does not start at boot

book

Article ID: 284974

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

  • Event Forwarder service does not launch when the server OS boots.
  • Error when using chkconfig to enable cb-event-forwarder:
service cb-event-forwarder does not suppoort chkconfig

Environment

  • EDR: 7.0.0-7.3.0
  • EDR Event Forwarder: 3.7.0 - 3.7.2
  • CentOS 6.x

Cause

Known interop issue with cb-event-forwarder running on CentOS 6.x. 

Resolution

  1. Edit /etc/init.d/cb-event-forwarder
  2. Add the following line to the top  of the file, around line 4 or 5, and include the #.
# chkconfig: 345 20 80
  1. Save the file.
  2. Add the Event Forwarder service to chkconfig:
chkconfig --add cb-event-forwarder
  1. Enable the Event Forwarder to start at boot:
chkconfig cb-event-forwarder on