CB Response: Increase the maximum number of CB Live Response sessions

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• How to increases the maximum number of CB Live Response sessions

Environment

• Cb Response Server: 6.x and Higher
• Cb Live Response

Resolution

1. Edit the /etc/cb/cb.conf file: 

vi /etc/cb/cb.conf

2. Update the value 'CbLRMaxActiveSessions'
3. Save changes to cb.conf file
4. Restart cluster/server

Additional Information

• Keep in mind that allowing too many sessions at once can cause performance issues.
• Start with incremental increase (10 > 15 > 25) before changing this value too high