How to Gather Logs for Support Using RepCLI

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Gather logs for Support using RepCLI commands

Environment

• Carbon Black Cloud Sensor: 3.3.x.x and Higher
• Microsoft Windows: All Supported Versions

Resolution

Sensors 3.6 and Higher:

1. Launch a Command Prompt on the affected machine.
2. Run commands:

   cd C:\Program Files\Confer
   repcli capture c:\temp -- Change to desired location

Sensors Prior to 3.6:

1. Launch a Command Prompt on the affected machine
2. Run commands:

   cd C:\Program Files\Confer
   repcli capture
   

3. The captured logs will be written to C:\Windows\Temp\confer-temp and named confer-temp.zip

Additional Information

• The "repcli capture" command does not require authentication or administrator rights on the machine
• The "repcli capture"  command gathers the same data as running the "sc control cbdefense 128" command
• The "repcli capture"  command requires Cb Defense Service to be running