Carbon Black Cloud: Contents Remain in /var/opt/carbonblack and /opt/carbonblack/ After Uninstall

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Content remains in /var/opt/carbonblack and /opt/carbonblack/ after uninstalling the Linux sensor

Environment

• Carbon Black Cloud: All Supported Versions
• Linux: RPM based distributions

Cause

This is expected in behavior in RPM based distributions.

Resolution

The folders and their remaining contents can be removed manually (or via script) post uninstall

Additional Information

Debian based distributions can make use of the "--purge" option to remove all items.