App Control: How To Increase the Interval for Agent Data Sync to Assist With Backlog Processing

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

How to reduce the interval between Agent sync attempts to allow the App Control Server to ingest backlog more successfully.

Environment

• App Control Server: All Supported Versions
• App Control Windows Agents: All Supported Versions
• Microsoft Windows OS: All Supported Versions

Resolution

1. Login to the Console and go to: https://ServerAddress/agent_config.php
2. Click on "Add Agent Config" button
3. Create the Config with the following:
   1. Name: sys_info_interval_ms
   2. Value: sys_info_interval_ms=43200000
   3. Host Id: 0
   4. Platform: Windows
   5. Status: Enabled
4. Save the change.

Additional Information

• These steps should only be completed under guidance from Support.
• Sys_info_interval_ms specifies how frequently to send this data the default being once an hour. If your endpoints images are static in nature (not a lot of new apps being installed, no changes to memory or network config) you might consider decreasing the frequency of the system info report to further reduce network traffic.