How to translate failure code in /var/log/cb/sensor_comm_failures/sensor_comm_failures.log?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

How to translate failure code in /var/log/cb/sensor_comm_failures/sensor_comm_failures.log?

Environment

• EDR Sensor: All Supported Versions

Resolution

1. Convert these decimal codes to hexadecimal code.

   For example, -2147012889 is "80072EE7".

2. Then add the prefix '0x'.
   • Adding '0x' to 80072EE7 becomes 0x80072EE7
3. Find the explanation in either of the following ways:
   1. Common sensor communication error messages (HRESULT)
   2. Translate Communication Error Codes (HRESULT)
      
      • -2147012894 -> 0x80072EE2: The request has timed out
      • -2147012889 -> 0x80072EE7: Unknown error
      • -2147024579 -> 0x8007013D: Failing to copy large files