EDR: Re-installed Sensor Reports Uninstall Pending

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• Sensor status reports "Uninstall Pending"
• Reinstall of sensor does not update "Uninstall Pending" status

Environment

• EDR Sensor: All Supported Versions
• EDR Server: All Supported Versions 

 

Cause

• Carbon Black has not yet identified the source of this issue

Resolution

• SSH into the EDR Primary Server and issue the following commands:
  1. psql -p 5002 cb -c "update sensor_registrations set uninstall=false where id = <sensor-id-here>";
  2. psql -p 5002 cb -c "update sensor_registrations set uninstalled=true where id = <sensor-id-here>";
  3. psql -p 5002 cb -c "update sensor_action set uninstall=false where id = <sensor-id-here>";
  4. /usr/share/cb/cbdatagrid evict SensorAction <sensor-id here>