EDR: Does The Event Forwarder Service Need To Be Started In The UI If The Service Is Started On The Backend?
book
Article ID: 287250
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
If the Event Forwarder service is restarted on the backend, should the Event Forwarder need to also be restarted in the UI?
Environment
- Hosted EDR: Version 7.0 and Higher
Resolution
No; restarting the Event Forwarder service on the backend should cause the Event Forwarder to show as Running in the UI.
Additional Information
Being logged into the UI at the time of the Event Forwarder restart can cause the Event Forwarder to show as Stopped in the UI.
Feedback
thumb_up
Yes
thumb_down
No