CB Response Unified View: Heartbeats failing with 401
search cancel

CB Response Unified View: Heartbeats failing with 401

book

Article ID: 285771

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

  • Cluster labeled 'Unstable'
  • Recent errors table shows 401 Codes with Invalid Credentials Error
  • Heartbeat count is low

Environment

  • CB Response Server: 6.x and Higher
  • CB Response Unified View: 6.1.3

Cause

The original token used for authentication was changed

Resolution

Update the user token in Unified View for the cluster
 

Additional Information

  • If using Individual Tokens, the user must disable their connection to the cluster for a different user's token to be used. Unified View will not automatically switch to another token due to CB-25487