How to identify a username from a userid

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• How does an administrator identify a username from just a userid number?

Environment

• EDR Server: 7.x and Higher

Resolution

      A.  Login to the EDR Primary server and run:

sudo psql -p 5002 cb -c "select id, username, firstname, lastname from cb_user;"

     
      B. Alternately, once on the EDR Primary server connect to the psql database.

1. Connect to psql database:

sudo psql -d cb -p 5002 

2. List the cb database schema tables.

cb# d\

3. List all columns in the cb_user table.

cb# \d cb_user

4. List in a table format, the username and user id.

cb# select id, username, firstname, lastname from cb_user;

4. Log out.

cb# \q

 

Additional Information

• Warning: It is not advised to modify the Postgres table without Carbon Black Support assistance due to the multiple indexes that could be affected.