Endpoint Standard: How to Verify Sensor Status With RepCLI

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Verify status of Sensor with the RepCLI utility
 

Environment

• Endpoint Standard (formerly Cb Defense) Sensor: 3.3.x.x and Higher
• Microsoft Windows: All Supported Versions

Resolution

1. Launch a Command Prompt
2. Change directory to C:\Program Files\Confer

   cd C:\Program Files\Confer

3. Enter the following command

   repcli status

4. The following Sensor Status data will print to the command line

   General Info:
       ​Sensor Version
       Local Scanner Version
       Sensor State
       Details
       Kernel File Filter
       Background Scan
       Sensor Restarts
   Cloud Status:
       ServerAddress
       Registered
       Next Check-In
       Private Logging
   Queues:
       Reputation Resubmit
       Reputation Expedited
       Reputation Slow
       Report Messages
       LiveQueries
       File Uploads
       Diagnostic Status
       Debugging
       Kernel DebugLevel
       Maintenance Mode
   Enforcement Status:
       Policy
       Execution Blocks
       Network Restrictions
   Rules Status:
       Translation Flags
   Alarms:
       Assertions
       LogSeverityErrorsHigh

   ​

Additional Information

• Authentication is not required to run the "repcli status" command
• The above list reflects the initial release of the 3.3 Sensor with RepCLI and is subject to change
• The "repcli status" command can be used to verify Sensor Status changes when using other RepCLI commands or sending commands from the Web Console