EDR: Unified-View Server Cb-Nginx Service will not Start

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• After install a Unified EDR Server the cb-nginx service does not start
• The following error message is seen in the /var/log/cb/nginx/startup.log

  nginx: [emerg] invalid number of arguments in "resolver" directive in /var/cb/nginx/props/nginx.runtime.resolver.prop

               

Environment

• EDR Server: 7.7
• EDR Server Unified View:7.7

Cause

• When the Unified View Server starts it attempts to read the nameserver line from the /etc/resolv.conf
• If the /etc/resolve.conf file does not have a nameserver line then the cb-nginx process does not start as expected 

Resolution

 A workaround to this issue is to add the following line to the /etc/resolv.conf 

nameserver localhost