CB Response: No sensor data is being uploaded to servers and all sensors are offline.

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

No binary or cbevents are being uploaded to the servers in the cluster.
All sensors are offline in the Web UI.
cb-coreservices in the cluster will only start up for a minute then shutdown.
cb-datastore and cb-sensorservices are also down.

Environment

• CB Response Server: All versions.
• CB Response Sensor: All versions.

Cause

Iptables firewall on the master had a DROP action for port 6379 used by the cb-redis service.

Resolution

Remove the DROP action for port 6379 from the master's iptables.