Carbon Black Cloud: How To Find DeviceID In Sensor Logs (Linux)

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

 To find the DeviceID from sensor logs provided by the customer per the instructions in https://community.carbonblack.com/t5/Knowledge-Base/Carbon-Black-Cloud-How-to-Run-the-Diagnostics-Script-for-Linux/ta-p/87740

 

Environment

• Carbon Black Cloud Sensor: All Versions
• Linux: All Supported Versions

Resolution

1. Launch terminal
2. Use grep to get RegistrationId

   % sudo grep 'RegistrationId' \var\opt\carbonblack\psc\cfg.ini

3. Look for "RegistrationId="

   RegistrationId=<org_id>-<device_id>
   
   Example:
   RegistrationId=4248-3671944

Additional Information

In the example above 4248 is the OrgID and 3671944 is the DeviceId