Carbon Black Cloud: MAC Sensor check-in, but fail to upload event data.
book
Article ID: 290841
calendar_today
Updated On:
Products
Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
Issue/Introduction
MAC Sensor is reporting to the console with check-ins. However, they are not uploading any event data.
Environment
Carbon Black Cloud MAC Sensor: 3.6.2.110, 3.7.1.12, 3.7.2.77, 3.7.2.81
MAC OS: All Supported Version
Cause
Event batches were generating high number of events which is impacting the upload time. Current sensor releases 3.7.1.x and 3.7.2.x did not account for high count of batch events. New logic is introduced to account for higher number of batch events in the Sensor Release 3.7.3
Resolution
The issue will be fixed in the Sensor Release 3.7.3 which is planned to release in April/2023.