EDR: Sensors Show Offline Until Next Reboot

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• Sensors will be offline until the server is rebooted. After a reboot the sensors will go offline again shortly
• SensorComms.log shows the HResult 0x80190192
• HTTP 402 message reported in the /var/cb/nginx/access.log

Environment

• EDR Server: 6.X and Higher
• EDR Sensor: All Versions

Cause

The server's license has expired

Resolution

A valid license must be applied to the server

Additional Information

Data collected while the sensor was offline will be collected once a valid license is applied