Event Forwarder Failed to Connect to Rabbitmq

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Event Forwarder failed to connect to rabbitmq using customized user credential.

Environment

• EDR server: 7.7+
• EDR Event Forwarder: 3.8.2+

Cause

The newly created user password, or token, has invalid characters.

Resolution

Test using only letters (both uppercase and lowercase) and numbers in the RabbitMQ password/token to confirm that is causing the issue and then eliminating the special characters potentially causing the issue.