Cannot access Yara Manager page - Unauthorized

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Going to https://<server_name>/connector/yara results in an unauthorized message

Environment

• EDR Server: 7.x
• Yara Connector: 2.2.0-1
• Yara Manager: 2.2.0-1

Cause

Unknown

Resolution

1. Confirm the user is signed into the server
2. If issue persists send the following to Support
   • Screenshot of EDR side-panel. Does Yara Manager appear?
   • Collect server and Har logs while reproducing the issue
   1. Edit /etc/cb/coreservices-logger.conf
   2. Under [logger_root], change level from WARN to DEBUG
      level=DEBUG
   3.  Perform a HAR capture starting from the EDR Dashboard. From there, click the Yara Icon on the side to go to the Yara page.
   4. If Yara icon is not present, manually go to https://<server_name>/connector/yara 
   5. Collect server diagnostics 
   6. Revert the logging settings by changing [logger_root] back to level WARN
      level=WARN