Endpoint Standard: Excessively large db_rep file on Linux file server

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

db_rep grows to several GB in size only days after installation

Environment

• Endpoint Standard: 2.6 and below
• Linux: All Supported Version
• File server
• Background scan enabled on server

Cause

Background scan will stop reputations of all files pre-existing on the server. For file servers, this can cause the file to grow very large

Resolution

1. Disable background scan - https://community.carbonblack.com/t5/Knowledge-Base/Cb-Defense-How-To-Disable-Background-Scan-on-a-Single-Device/ta-p/65643
2. Reset sensor to refresh the local database. This must be done by a Carbon Black Technical Support Engineer. 

Additional Information

Sensor version 2.7 is planned to have a setting to prune the database when it grows too large.