App Control: Agent Does Not Have an Active Yara Rules File
search cancel

App Control: Agent Does Not Have an Active Yara Rules File

book

Article ID: 286501

calendar_today

Updated On:

Products

Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

  • Agents are failing Health Checks with the following message:
Carbon Black App Control Agent detected a problem: Agent does not have an active yara rules file Version[0]. Options[00000003] TotalFailures[1] FailureId[875]

Environment

  • App Control Server: All Supported Versions
  • App Control Agent: All Supported Versions

Cause

  • The Agent has a corrupted or missing Yara file.
  • The Server's last automatic generation of the Yara package was either interrupted, or did not build correctly. Expected Yara and actual Yara no longer match.

Resolution