CB Defense: "ERROR - [Errno 2] No such file or directory" While Running Syslog

Products

• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

ERROR - [Errno 2] No such file or directory: 'root/usr/share/cb/integrations/cb-defense-syslog.pid' while running the Syslog Connector via absolute path

Environment

• CB Defense PSC Backend: All Supported Versions
• RHEL/CentOS: All Supported Versions

Cause

This can happen when running the connector as the python script has a relative path in it

Resolution

• Run the python script cb_defense_syslog.py from its working directory
• From a cron job add "cd PATH/cb_defense_syslog.py &&" before calling the python script

  * * * * * cd PATH/cb_defense_syslog.py && python cb_defense_syslog.py -l log.txt -c syslog.conf