EDR: Does The Event Forwarder Service Need To Be Started In The UI If The Service Is Started On The Backend?
search cancel

EDR: Does The Event Forwarder Service Need To Be Started In The UI If The Service Is Started On The Backend?

book

Article ID: 287250

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

If the Event Forwarder service is restarted on the backend, should the Event Forwarder need to also be restarted in the UI?

Environment

  • Hosted EDR: Version 7.0 and Higher

Resolution

No; restarting the Event Forwarder service on the backend should cause the Event Forwarder to show as Running in the UI.

Additional Information

Being logged into the UI at the time of the Event Forwarder restart can cause the Event Forwarder to show as Stopped in the UI.