Carbon Black Cloud: How to find Sensor Update Status job_id

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Provide steps for finding the job_id of a specific Sensor Update Status job for troubleshooting purposes

Environment

• Carbon Black Cloud Console: All Versions

Resolution

1. Log into Console
2. Click on Sensor Update Status tab, noting date/time of desired Sensor Update Status (SUS) job record
3. Go to Settings > Audit Log and search for "Requested sensor upgrade job" (adjust time window as needed)
4. Results will show job_id and details of OS and Sensor version selected at job creation

   Requested sensor upgrade job xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx with selected version(s): [SensorVersion(id=null, type=WINDOWS, version=3.7.0.1411)]

Additional Information

• A Job ID (job_id) consists of an eight-character string, three four-character strings, and a twelve-character string (all hexadecimal characters)
  • xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
• Further improvements to the Sensor Update Status page are planned to make identifying specific jobs simpler and less reliant on searching through the Audit Log
• Provide the following to Support for any cases dealing with Sensor Update Status jobs

  Job ID
  Total Sensor count
  Updated Sensor count
  Errors Sensor count