Cb Response: How to check if a sensor is reporting data successfully

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

How to check if a sensor is reporting data successfully to the Cb Response server

Environment

• Cb Response Sensor: 5.x and Higher

Resolution

• SensorComms.log shows successful checkin and event data submits if the result is '0x00000000'

<Date> | https://<MinionServername>:443/data/eventlog/submit2/165370 | 0x00000000 | 0 | 218 | 87487 | 0 | 500 | 391 
<Date> | https://<MasterServername>:443/sensor/checkin/165370 | 0x00000000 | 0 | 203 | 250 | 224 | 500 | 1  
<Date> | https://<MinionServername>:443/data/storefile/check/165370 | 0x00000000 | 0 | 125 | 172 | 180 | 500