Where Are the Sensor Gateway Logs?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
• Carbon Black Cloud Workload

Issue/Introduction

Where are the logs for troubleshooting the Sensor Gateway found?

Environment

• Carbon Black Workload Appliance: All Versions

Resolution

• The logs within the Sensor Gateway Container
  • /data/logs/sgw-service.log
  • /data/logs/supervisord.log
  • /data/logs/envoy-system.log
  • /data/logs/envoy-access.log
• The logs directory within the Linux VM of the Sensor Gateway
  • /opt/vmware/sgw/data/logs

Additional Information

1. In order to review the Sensor Gateway logs within Docker get the CONTAINERID by running the following command

   docker container ls

2. Then fun this command to view sgw-service.log for example

   docker exec CONTAINERID cat /data/logs/sgw-service.log