Enterprise EDR: What query can be ran to check the status of a Linux Sensor?
search cancel

Enterprise EDR: What query can be ran to check the status of a Linux Sensor?

book

Article ID: 287326

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

What query can be ran to check the running status of a Linux sensor?

Environment

  • Enterprise EDR (formerly Threat Hunter): All supported versions
  • Linux Sensor: All supported versions

Resolution

Run the below command:
systemctl status cbagentd

Additional Information

The running process software management tools can query the status is: 
cbagentd