EDR: Linux sensors reporting driver failures - kernel not ready yet

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• Sensor Health Score is "Health Score: 50 Driver Failure"
• Sensor logs show the following messages

  • W0904 12:06:16.921250 20868 driver-manager.cpp:1219] Warning -6 unconnected count: 326850 kernel not ready yet

  • E0904 12:06:32.914799 20869 driver-manager.cpp:136] CB_DRIVER_REQUEST_APPLY_FILTER failed: -1

    
     

Environment

• CB Response Sensor: All Versions
• Linux: All Support Versions

Cause

The OS and/or kernel version is unsupported

Resolution

Update the OS and/or kernel version to a supported version for the sensor