CB Response: Cb-enterprise service fails to start after install with error "ClusterConfigError: No nodes configured for events"

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Standard output of cb-enterprise service starting fails with this error:

ClusterConfigError: No nodes configured for events

Environment

• CB Response Server: All versions
• CB Response Sensor: All versions

Cause

At installation time, there was only one node (the master) to be installed, and it was not designated to collect events.

Resolution

There is no need to rerun the installation.

1. Edit the text file /etc/cb/cluster.conf

vi /etc/cb/cluster.conf

2. Change the HasEvents flag to "True"
3. Save the configuration 
4. Restart Cluster services: https://community.carbonblack.com/t5/Knowledge-Base/CB-Response-How-to-restart-server-services/ta-p/41294