EDR How to force a sync of event data from a sensor

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

How to force a sync of event data from a sensor.

Environment

• EDR Server: All Versions
• EDR Sensor: All Versions

Resolution

1. Validate the sensor shows up as "Online' in the CB Response WebUI
2. On the Sensors page, check the box next to the workstation to be prioritized
3. Click on `Actions` in the top right > Press the “Sync” option 

Additional Information

• The SYNC option should be used to prioritize individual machines that need to send their data immediately and should not be used for multiple or bulk uploads
• This will flag the specific machine to upload ALL of its data the next time it checks in.