Enterprise EDR: Excessive log size with message "ThReportHandler : Destination is not set to cloud or defense, ignoring event"
search cancel

Enterprise EDR: Excessive log size with message "ThReportHandler : Destination is not set to cloud or defense, ignoring event"

book

Article ID: 290314

calendar_today

Updated On:

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

Repeated message in logs "ThReportHandler : Destination is not set to cloud or defense, ignoring event"

Environment

  • Enterprise EDR sensor: 2.11.2 and Below
  • Linux: All Supported Versions

Cause

The log is benign, but can cause an unnecessary amount of logging. This was addressed in PSCLNX-9355    

Resolution

  • This logging is removed in sensor version 2.11.3 and above. 
  • If upgrade is not possible, the logs can be manually removed until upgrade is possible.