EDR: Is There a Way to Change the Server URL for a Sensor After Making the Change Server Side?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Is there a way to change the Server URL reference on a sensor after the server URL has already been updated on the server?

Environment

• EDR Server: All Versions
• EDR Sensor: All Versions

Resolution

Yes, this can either be done by manually updating the SensorBackendServer value on the endpoint or by re-installing the updated sensor package.

Additional Information

• For Windows endpoints, this setting is set under HKEY_LOCAL_MACHINE\SOFTWARE\CarbonBlack\config\SensorBackendServer 
• Linux and Mac endpoints use the value stored in /var/lib/cb/sensorsettings.ini under the SensorBackendServer field
• Before making any changes on the sensor side, the sensor groups must point to the new node URL