EDR: Unable to start service due to file corruption

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• CB-enterprise failed to start      
                                                                 

cb-enterprise[25111]: [Errno 117] Structure needs cleaning: '/var/cb/data/solr5/cbevents/cbevents_2021_08_10_1901/data/index'

• Unable to delete the file

 

Environment

• EDR(Formerly Carbon Black Response) Server: All Supported Versions

Cause

File Corruption or File System Corruption.

Resolution

Run fsck (file system consistency check) on the disk to resolve the corruption.

Additional Information

• Example fsck( file system consistency check) run: