EDR: Nginx Using Higher than Normal CPU on Server 7.5.0

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Nginx is utilizing more CPU when sensors are being throttled with 503's from Datastore

Environment

• EDR Server: 7.5.0
• Nginx

Cause

Newly added error configuration for WebUI includes 503

Resolution

1. Edit /etc/cb/nginx/conf.d/includes/cb.server.error
2. Remove 503 from the error_page line, keeping similar spacing
3. Save the file
4. Restart nginx

   /usr/share/cb/cbservice cb-nginx restart

Additional Information

• CB-36113