Enterprise EDR: What query can be ran to check the status of a Linux Sensor?
book
Article ID: 287326
calendar_today
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
Issue/Introduction
What query can be ran to check the running status of a Linux sensor?
Environment
- Enterprise EDR (formerly Threat Hunter): All supported versions
- Linux Sensor: All supported versions
Resolution
Run the below command:
systemctl status cbagentd
Additional Information
The running process software management tools can query the status is:
cbagentd
Feedback
thumb_up
Yes
thumb_down
No