EDR: How to generate sensor logs
search cancel

EDR: How to generate sensor logs

book

Article ID: 286345

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

To generate sensor reports for general troubleshooting purposes. 

Environment

  • EDR  Sensor: All Supported Versions

Resolution

To generate an endpoint sensor report for:
  • Windows sensors (sensor 6.2.1 and below): https://community.carbonblack.com/t5/Knowledge-Base/CB-Response-Generate-Windows-sensor-report/ta-p/67648
  • Windows sensors (sensor 6.2.2 and Higher): https://community.carbonblack.com/t5/Knowledge-Base/EDR-How-to-Collect-Windows-Sensor-Diagnostic-Logs-6-2-2/ta-p/93494
  • Apple MacOS sensors (sensor 6.1.3 and earlier): https://community.carbonblack.com/t5/Knowledge-Base/Cb-Response-How-to-generate-Apple-MacOS-sensor-diag-report-6-1-3/ta-p/62912
  • Apple MacOS sensors (sensor 6.2.0 and Higher): https://community.carbonblack.com/t5/Knowledge-Base/Cb-Response-Generate-Mac-OSX-sensor-diag-report-in-6-2-x-and/ta-p/37077
  • Linux sensors: https://community.carbonblack.com/t5/Knowledge-Base/Cb-Response-How-to-gather-Linux-sensor-diagnostics/ta-p/48672
 
 

Additional Information

  • Sensor reports under 25 MB can be attached directly to a Carbon Black Technical Support case. 
  • Files larger than 25 MB should be uploaded to CB Vault.