Enterprise EDR: Excessive log size with message "ThReportHandler : Destination is not set to cloud or defense, ignoring event"

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Repeated message in logs "ThReportHandler : Destination is not set to cloud or defense, ignoring event"

Environment

• Enterprise EDR sensor: 2.11.2 and Below
• Linux: All Supported Versions

Cause

The log is benign, but can cause an unnecessary amount of logging. This was addressed in PSCLNX-9355    

Resolution

• This logging is removed in sensor version 2.11.3 and above. 
• If upgrade is not possible, the logs can be manually removed until upgrade is possible.