EDR Server: How to enable debug logging for feeds
search cancel

EDR Server: How to enable debug logging for feeds

book

Article ID: 289493

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Enable debug logging in enterprise.log for feed troubleshooting

Environment

  • EDR Server: All Supported Versions

Resolution

  1. Edit /etc/cb/enterprise-logger.conf
  2. Add the following "cb.core.feeds" text to the [loggers] section:
[loggers]
keys=root, cb.core.feeds
  1. Add the following NEW section, just after the [logger_root] section:
[logger_cb.core.feeds]
level=DEBUG
handlers=syslog
propagate=0
qualname=cb.core.feeds

Additional Information

  • No restart is required
  • Configuration only needs to be done on the primary node in a cluster
Powered by Wolken Software