CB Response: How to Get Event Partition Status
book
Article ID: 287913
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
How to get event partition status from an event node
Environment
- Carbon Black Protection Server: 6.2.0 and Above
Resolution
- Open a session as root or su
- Run this command
curl -k https://localhost/api/v1/storage/events/partition -H "X-Auth-Token:<Valid API Token>" | python -m json.tool
Additional Information
- Data returned will have the info for cold, warm and hot partitions on the node
- Hot partitions will not have an "endDate"
Feedback
thumb_up
Yes
thumb_down
No