Enable REPUX logging on Windows Endpoints

Products

• Carbon Black Cloud Endpoint Standard
• Carbon Black Cloud Enterprise EDR

Issue/Introduction

Enable Repux logging on Windows Endpoints

Environment

• Carbon Black Cloud Windows Sensor: Supported Versions
• Microsoft Windows OS: Supported Versions

Resolution

1. Place sensor in bypass
2. Add "RepUXLogEnabled=1" in cfg.ini 
   1. For Windows sensor versions 3.6 and earlier, cfg.ini is located at C:\Program Files\Confer\cfg.ini.
   2. For Windows sensors 3.7 and later, cfg.ini is located at C:\ProgramData\CarbonBlack\DataFiles\cfg.ini.
3. Run "C:\Program Files\Confer\RepCLI.exe updateconfig"
4. Restart the user session (or manually kill repux.exe & restart it)
5. Exit bypass
6. Confirm if "RepUx.log" in the user's AppData\local\temp directory (Windows env variable for the temp directory is %TEMP%)