EDR: Getting 404 On A Sensor Page

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Getting a 404 error when viewing sensor detail page.

Environment

• EDR Console: All Versions
• EDR Sensor: All Versions

Cause

• The sensor has not been checked in for over certain days and thus been purged.
• The sensor has not been checked in within the 'SensorLookupInactiveFilterDays' threshold.

Resolution

• For the first cause condition:
  • Reinstall the sensor.
• For the second cause condition:
  • Change the 'SensorLookupInactiveFilterDays' either within the Sensors page UI or within the /etc/cb/cb.conf file to exceed the threshold of when the sensor most recently checked in.