EDR CB-Yara-Connector: Enable Debug Logging

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

To enable debug logging for the Cb-Yara-Connector for further granularity in troubleshooting.

Environment

• EDR Server: All supported versions
• CB-Yara-Connector: All supported versions

Resolution

• Add the parameter below to the /etc/cb/integrations/cb-yara-connector/yaraconnector.conf file:

log_level=DEBUG

• Restart cb-yara-connector services:

systemctl restart cb-yara-connector