CB Response: Cannot purge cbmodules via modulestore_purge cron job
book
Article ID: 289701
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Show More
Show Less
Issue/Introduction
/var/log/cb/solr/debug.log shows the following error and some sort of corrupt MD5 in the log
/var/log/cb/job-runner/job-runner.log shows modulestore_purge running, but never completes
Environment
CB Response Server: 5.x and Higher
Cause
The MD5 of a binary is corrupted and cannot be processed
Resolution
Manually delete the corrupt binary via curl.
Verify the binaries to be deleted. Substitute <PARTIAL_BINARY> with the binary
If the only value was returned, it is safe to delete the binary by running:
Additional Information
If more than one binary is returned, the query will need to be narrowed down. A value such as the start time should be specific enough to the corrupt binary. Substitute 2016-09-26T18:02:11.518Z with the desired timestamp
server_added_timestamp can be found via the following query
Feedback
thumb_up
Yes
thumb_down
No