Error During Synchronization of Virustotal Connector Feed

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• Feed Synchronizer Task Error on HUD page of the EDR console.
• /var/log/cb/enterprise/enterprise.log shows following error:  

<err> cb.enterprise.tasks.feed_synchronizer - Error during synchronization of feed virustotalconnector(??): Connection error retrieving feed: HTTPConnectionPool(host='127.0.0.1', port=4000): Max retries exceeded with url: /feed.json?server_token=* &start_time=* (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at errorcode>: Failed to establish a new connection: [Errno 111] Connection refused'))

 

Environment

• EDR Server: All Supported Versions

Cause

cb-virustotal-connector was in stopped state.

Resolution

• Start the cb-virustotal-connector service on the node
• service cb-virustotal-connector start

 

Additional Information

• More details on Carbon Black - VirusTotal Connector