EDR: How to Remove a Sensor Version from the Console

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Remove a sensor version from the EDR console.

Environment

• EDR Server: All versions

Resolution

1. On a standalone EDR server or on the cluster's primary EDR server:

For Linux installers: 
  cd /usr/share/cb/coreservices/installers/linux/

For Mac installers: 
  cd /usr/share/cb/coreservices/installers/osx/

For Windows installers: 
  cd /usr/share/cb/coreservices/installers

Move, or remove, the files associated with the sensor version to be eliminated from the EDR console.

2. Run:

/usr/share/cb/cbcheck sensor-builds --update

3. Restart the cb-enterprise service or cluster.

Standalone EDR:
service cb-enterprise stop
service cb-enterprise start

EDR Cluster:
/usr/share/cb/cbcluster stop
/usr/share/cb/cbcluster start