CB Response: How To Update The Response URL In Alert Emails

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

The URL for email alerts in CB Response is based off of the server's hostname. If the hostname does not match the FQDN, alert links will not work. These steps will cover what settings need to be changed to update the server's hostname.

Environment

• CB Response: All Versions
• Linux: All Supported Versions

Resolution

1. Update the HOSTNAME field in /etc/sysconfig/network

   HOSTNAME=host.domain.com

2. From the command line, update the hostname reference 

   hostname host.domain.com

3. If the hostname is used for internal networking, update the hostname in /etc/hosts. 

   Do not make any changes in between # {{BEGIN - CB Server}} and # {{END - CB Server}}

4. If running a cluster and /etc/cb/cluster.conf references the node's hostname, update the value across all nodes. If cluster.conf uses the host's IP instead of domain name, this change does not need to be made.
5. Restart the server's network

   /etc/init.d/network restart

6. If cluster.conf was updated, restart the cluster.

   /usr/share/cb/cbcluster stop
   
   /usr/share/cb/cbcluster status
   
   /usr/share/cb/cbcluster start