Enterprise EDR: Excessive log size with message "ThReportHandler : Destination is not set to cloud or defense, ignoring event"
book
Article ID: 290314
calendar_today
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
Issue/Introduction
Repeated message in logs "ThReportHandler : Destination is not set to cloud or defense, ignoring event"
Environment
- Enterprise EDR sensor: 2.11.2 and Below
- Linux: All Supported Versions
Cause
The log is benign, but can cause an unnecessary amount of logging. This was addressed in PSCLNX-9355
Resolution
- This logging is removed in sensor version 2.11.3 and above.
- If upgrade is not possible, the logs can be manually removed until upgrade is possible.
Feedback
thumb_up
Yes
thumb_down
No