CB Response: How to Change the UI Session Timeout Length

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

How to change the amount of time before a user is sent back to the UI Login page from the default of 3600 second (1 hour). 

Environment

• CB Response Server: All Supported Versions

Resolution

1. Backup the master cb.conf file 

   cp /etc/cb/cb.conf /etc/cb/cb.conf.bakDATE

2. Edit the /etc/cb/cb.conf file
3. Add or update the following configuration setting, updating the parameter to the value needed 

   SessionTimeout=<Timeout in Number of Seconds>

4. Save the changes made
5. Restart the services as described in this KB article

Additional Information

Increasing the session timeout above the default setting does create a security risk. For more information you can review CWE-613