Cb Response: How to edit a cron job on a Cb Response server

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Modify cron jobs on a Cb Response Server and have it take effect.

Environment

• Cb Response Server: 6.0 and Higher

Resolution

1. Login to the Cb Response master server as root or use sudo.
2. Open /etc/cb/cron/cb.cron.template
3. Make the necessary modifications and save the file.
4. Restart the Cb Response cluster

Additional Information

When the server cluster starts, the /etc/cb/cron/cb.cron.template file will generate the /etc/cron.d/cb file, which is where the cron service actually looks for commands to run. But the cb.cron.template file is the one that must be modified for the changes to last.