"First Registered" date changes when the agent cache is rebuilt

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

The "First Registered" date changes in the computer details page when the agent cache is rebuilt without uninstalling the agent software

Environment

• App Control Console: All Supported Versions
• Windows OS: All Supported Versions

Cause

"First Registered" is the date and time that the computer first registered with its server. In the event of a cache corruption/cache rebuild the agent's registration count is reset to 0 on the App Control Server.

Resolution

Defect EP-19397 will fix the issue, so that the "First Registered" date and time are not reset on the App Control Server when an agent cache rebuild takes place.

Additional Information

A rebuild of the cache creates an event with subtype "agent database error":

Carbon Black App Control Agent had to rebuild its primary database cache and now has to re-initialize. FullRestores[2] BackupRestores[7] LastPrimaryCreated[3/20/2021 6:56:50 PM]