Carbon Black Cloud: Sensor Recording Very Few Events

Products

• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

• Sensor is still checking in, but very few events are recording and being sent to console
• Attempts to collect sensor diagnostics fails

Environment

• Carbon Black Cloud Sensor: All Versions
• Microsoft Windows: All Versions

Cause

Device is out of disk space so data cannot zipped up and sent

Resolution

• Resolve disk space issues
• If issue persists after disk space is resolved, collect sensor logs and open a case with Support