Carbon Black Cloud: MAC Sensor check-in, but fail to upload event data.

Products

• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

MAC Sensor is reporting to the console with check-ins. However, they are not uploading any event data.

Environment

• Carbon Black Cloud MAC Sensor: 3.6.2.110, 3.7.1.12, 3.7.2.77, 3.7.2.81
• MAC OS: All Supported Version

Cause

Event batches were generating high number of events which is impacting the upload time.  Current sensor releases 3.7.1.x and 3.7.2.x did not account for high count of batch events. New logic is introduced to account for higher number of batch events in the Sensor Release 3.7.3 

Resolution

The issue will be fixed in the Sensor Release 3.7.3 which is planned to release in April/2023.