Carbon Black Cloud: Where can sensor logs be found for sensors that are partially installed/uninstalled to provide support for troubleshooting?
search cancel

Carbon Black Cloud: Where can sensor logs be found for sensors that are partially installed/uninstalled to provide support for troubleshooting?

book

Article ID: 287320

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Where can sensor logs be found for sensors that are partially installed/uninstalled to provide support for troubleshooting?

Environment

  • Carbon Black Cloud Senor: All supported versions
  • Microsoft Windows all supported versions

Resolution

  • Sensor logs
    • Pre 3.6 - C:\Program Files\Confer
    • Post 3.6 - C:\ProgramData\CarbonBlack\Logs
  • Microsoft Windows Installer Log (msi.log)
    • Pre 3.6 - C:\Program Files\Confer
    • Post 3.6 - C:\ProgramData\CarbonBlack\Logs
  • Sensor Install Log (confer-temp.log). 
    • C:\Users\<user>\AppData\Local\Temp\
    • C:\Windows\TEMP\
    • C:\Users\All Users\AppData\Local\Temp

Additional Information

  • Please collect available files, and upload to CB Vault
  • If the Sensor Removal Tool is required Upload relevant logs from the resolution section to the CB Vault if available
  • Technical support can then provide the Sensor Removal Tool 
  • Please include the sensor version