Cb Response: TimesTen application slow when CB Response sensors are installed

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• TimesTen Linux applications servers performance is affected when the Cb Response sensor is installed.

Environment

• Cb Response Console: 6.x
• Cb Response Sensors:5.2.9 and Higher
• RHEL: 7.3 
• TimesTen Application

Cause

• RHEL 7.3 servers running 3.10.0-514.36.5.el7.x86_64 kernel verison are the cause of the performance issue.

Resolution

1. Upgrade the RHEL OS version to 7.4
2. Validate the kernel version is updated to 3.10.0-693.11.6.el7.x86_64

Additional Information

• Performance issue was resolved by upgrading the OS on the servers, and all versions of the TimesTen application and Cb Response sensor were working after the upgrade.