EDR: Where Is The Documentation of the New Sensor_Status Table in Postgres?
book
Article ID: 287235
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
Where is the documentation of the new sensor_status table in postgres?
Environment
EDR Server: 7.5.0 and Higher
Resolution
The change is documented in the release notes for EDR Server 7.5.0. This is an architectural change which does not need to be specified on what changes were made to tables or code:
"Sensor Service Performance Improvements: VMware Carbon Black EDR 7.5.0 introduces a re-architecture of the way in which sensors check in to the server. The result is a significant improvement in sensor check-in rates and overall system performance and stability."
Additional Information
Both the sensor_registrations and sensor_status tables are in use in postgres. Sensor_registrations table will still track the registrations and the computer hostname will get matched to an ID in that table, but the sensor_status table is now used as well for tracking 'last_checkin_time', 'last_update' and 'next_checkin_time'.