CB Response: What Are The Linux Sensor Health Score Events?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

What are the Linux sensor health score events and what is their impact on sensor health?
 

Environment

• CB Response: All Versions
• Linux: All Supported Versions

Resolution

Memory Usage

Memory (MB)	Health Score	Message
> 75	-5	Elevated memory usage
> 100	-10	Elevated memory usage
> 150	-20	High memory usage
> 300	-25	Very high memory usage
> 450	-50	Excessive memory usage

 

Driver Failure

Condition	Health Score	Message
Driver Failure	-50	Driver Failure (pre 6.2.x)
Driver Failure	-50	Event Source Not Connected
Driver Failure	-50	Kernel version xxx is unsupported
Driver Failure	-50	Event Collector Not Installed

 

Failed to get Event log Stats

Condition	Health Score	Message
Unable to determine current event log stats	-50	Failed to get Event log stats

  

Out of License

Condition	Health Score	Message
Expired License	-25	Out of License