Carbon Black Cloud: How to Gather Logs for Support Using RepCLI
search cancel

Carbon Black Cloud: How to Gather Logs for Support Using RepCLI

book

Article ID: 286115

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Gather logs for Support using RepCLI commands

Environment

  • Carbon Black Cloud Sensor: 3.3.x.x and Higher
  • Microsoft Windows: All Supported Versions

Resolution

Sensors 3.6 and Higher:
  1. Launch a Command Prompt on the affected machine.
  2. Run commands:
    cd C:\Program Files\Confer
    repcli capture c:\temp -- Change to desired location
Sensors Prior to 3.6:
  1. Launch a Command Prompt on the affected machine
  2. Run commands:
    cd C:\Program Files\Confer
    repcli capture
    
  3. The captured logs will be written to C:\Windows\Temp\confer-temp and named confer-temp.zip

Additional Information

  • The "repcli capture" command does not require authentication or administrator rights on the machine
  • The "repcli capture"  command gathers the same data as running the "sc control cbdefense 128" command
  • The "repcli capture"  command requires Cb Defense Service to be running