EDR: How to Install the CBR-Qualifier Tool

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

How to install the CB Response Qualifier Tool on Red Hat and CentOS distributions.

Environment

• CB Response Qualifier
• RHEL/CentOS: 7, 8

Resolution

Please do this as root or with the equivalent permissions.
1. Create a cbr-qualifier.repo file in /etc/yum.repos.d/ with the following contents:

[cbr-qualifier]
name=cbr-qualifier
baseurl=https://qualifier.yum.carbonblack.com/cbr-qualifier/production/release/$releasever/$basearch/ 
gpgcheck=0
enabled=1
metadata_expire=60

2. Run "yum install cbr-qualifier"
3. Contact VMware Carbon Black EDR Customer Support for guidance on the correct parameters.

 

Additional Information

• For error "/usr/bin/fio: No such file or directory", please install fio package first.  The issue is tracked in CB-42919. 

  yum install fio

• https://community.carbonblack.com/t5/Knowledge-Base/EDR-SOLR-writing-to-drives-is-suddenly-slower-causing-aggregate/ta-p/98397