Is There a Log That Details the Sensor Registration Process? (3.5.x.x and Higher)

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

When the verbose MSI log (/L*vx) states that registration failed, is there another log that records details of the registration process?

Environment

• Carbon Black Cloud Sensor: 3.5.x.x and Higher
• Microsoft Windows: All Supported Versions

Resolution

The cb-installer-<VersionNumber>.log file records details about the registration process, and it is located in one of the following directories

C:\Users\<user>\AppData\Local\Temp\
C:\Windows\TEMP\
C:\Users\All Users\AppData\Local\Temp

Alternately search via cmd.exe

1. Open cmd.exe
2. Search for file in user's Temp directory

   cd /d c:\
   dir %TEMP%\cb-installer-*.log

3. Search for file across file system if nothing found above

   dir /s %TEMP%\cb-installer-*.log

Additional Information

• The text <VersionNumber> will vary based on the version of the installer being run (ex: cb-installer-3.5.0.1523.log, cb-installer-3.7.0.1253.log, etc.)
• The precise location can typically be found by typing %temp% in the run box and pressing the Enter key
• The location is usually determined by the user logged in at the time of the install attempt
• The cb-installer-<VersionNumber>.log file also contains many useful details about installation of services so is worth reviewing for any install issues