Cb Response: How to check if a sensor is reporting data successfully
book
Article ID: 289124
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
How to check if a sensor is reporting data successfully to the Cb Response server
Environment
- Cb Response Sensor: 5.x and Higher
Resolution
- SensorComms.log shows successful checkin and event data submits if the result is '0x00000000'
<Date> | https://<MinionServername>:443/data/eventlog/submit2/165370 | 0x00000000 | 0 | 218 | 87487 | 0 | 500 | 391
<Date> | https://<MasterServername>:443/sensor/checkin/165370 | 0x00000000 | 0 | 203 | 250 | 224 | 500 | 1
<Date> | https://<MinionServername>:443/data/storefile/check/165370 | 0x00000000 | 0 | 125 | 172 | 180 | 500
Feedback
thumb_up
Yes
thumb_down
No