CB Response: multiple sensor registrations under VDI

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• A sensor registering under VDI could be assigned a new ID even if it had previously registered under an existing ID.

• From the sensorservices debug log:

  2019-07-19 12:01:21 [76955] <err> flask.app - Exception on /sensor/register [POST]
  Traceback (most recent call last):
    File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
      response = self.full_dispatch_request()
    File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
      rv = self.handle_user_exception(e)
    File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
      reraise(exc_type, exc_value, tb)
    File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
      rv = self.dispatch_request()
    File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
      return self.view_functions[rule.endpoint](**req.view_args)
    File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/cb/flask/blueprints/sensor_blueprint.py", line 103, in inner
    File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/cb/flask/blueprints/sensor_blueprint.py", line 164, in register
    File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/cb/utils/decorators.py", line 36, in wrapper
    File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/cb/sensor/engine.py", line 1103, in register
    File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/cb/core/config/active_grid_config.py", line 452, in __getitem__
    File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/cb/core/config/active_grid_config.py", line 590, in _get
    File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/hazelcast/future.py", line 274, in f
      return result.result()
    File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/hazelcast/future.py", line 61, in result
      six.reraise(self._exception.__class__, self._exception, self._traceback)
    File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/hazelcast/future.py", line 145, in callback
      fut...
  2019-07-19 12:01:21 [76955] <err> flask.app - 
      ...ure.set_result(continuation_func(f, *args))
    File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/hazelcast/proxy/map.py", line 979, in _update_cache
      self._near_cache.__setitem__(key_data, f.result())
    File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/hazelcast/future.py", line 61, in result
      six.reraise(self._exception.__class__, self._exception, self._traceback)
    File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/hazelcast/future.py", line 145, in callback
      future.set_result(continuation_func(f, *args))
    File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/hazelcast/proxy/base.py", line 12, in default_response_handler
      response = future.result()
    File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/hazelcast/future.py", line 61, in result
      six.reraise(self._exception.__class__, self._exception, self._traceback)
    File "<string>", line 3, in reraise
  RetryableHazelcastError: Map sensor_registrations is still loading data from external store

Environment

• CB Response server: 6.5.0 and previous versions

Cause

Delay in loading registration data into the datagrid component.

Resolution

Upgrade to 6.5.2 or above server version. 

Additional Information

• Fixed with Bug CB-28242 in 6.5.1