EDR: How To Configure Disk Space Usage for Sensor Events and Binaries

Products

• Carbon Black EDR (formerly Cb Response)
• Carbon Black Hosted EDR (formerly Cb Response Cloud)

Issue/Introduction

How can the maximum disk usage be configured for sensors in regards to events and queued data?

Environment

• EDR Server: All Supported Versions
• EDR Sensor: All Supported Versions

Resolution

• The "Sensor-side Max Disk Usage" is configurable from the EDR Admin UI under the Sensors > Sensor Group settings > Advanced section.
• The default values are 1024MB or 2%. The sensor will limit client-side storage to the smaller of the two values.