EDR: Server won't start, stops at cb-datastore.

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

1. cb-rabbitmq appears to start with an "OK"  (but actually has errors at startup time)
2. cb-datastore fails to start
3. This error was found in /var/log/cb/datastore/debug.log 

   2020-09-08 21:11:04,208 - [ERROR] - from com.carbonblack.cbfs.http.listeners.WebAppContextListener in main
   Initialization error, exiting
   java.net.ConnectException: Connection refused (Connection refused)

4. This error occurs in /var/log/cb/rabbitmq/startup.out: 

   2020-09-08 21:47:56,080 - [ERROR] - from com.carbonblack.cbfs.http.listeners.WebAppContextListener in main 
   Initialization error, exiting
   com.rabbitmq.client.AlreadyClosedException: channel is already closed due to channel error; protocol method: #method<channel.close>(reply-code=404, reply-text=NOT_FOUND - no exchange 'api.events' in vhost '/', class-id=50, method-id=20)

Environment

• EDR Server: 7.x 
• EDR Sensor: all versions
• Linux: All versions

Cause

https://knowledge.broadcom.com/external/article/286306/edr-how-to-reset-mnesia-for-rabbitmq.htmlSELinux was enabled

Resolution

Follow the steps:-

1. Disable SELinux.

• sudo setenforce 0

2. Clear temporary RabbitMQ Mnesia data using this solution.

3. Restart services .