EDR: How to get a list of sensors and health scores

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Collect a list of sensors and respective health scores

Environment

• EDR Server: 6.x and higher (Formerly CB Response)
• REST API

Resolution

The health scores can be acquired through a few options

1. Export the list from the sensors page: Sensors > All Sensors > Export
2. Query the Postgres database

   • psql cb -p 5002 -c "select computer_name, sensor_health_status, sensor_health_message from sensor_registrations;"

     
      
3. The REST API GET /api/v1/sensor call will return all sensors including:
   • sensor_health_message
   • sensor_health_status

Additional Information

• sensor_health_message: Human-readable string indicating sensor’s self-reported status
• sensor_health_status: self-reported health score, from 0 to 100. Higher numbers better