EDR: How to Change Log Rotation Settings

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

To modify the log rotation settings in EDR

Environment

• EDR Server: All Supported Versions
• All Supported Linux Versions

Resolution

• Edit the /etc/cb/cb-logrotate.conf as desired
• The different logs files are displayed and share settings according to the following brackets {}
• To modify a specific log by itself cut and paste it to a different section with it's own settings in {}

Additional Information

• This does not require a restart of the services to take affect
• Logs without any settings will fall under the /etc/logrotate.conf settings