How to Restart Server Services

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

How to restart EDR on a clustered or standalone server.
 

Environment

• EDR (Formerly CB Response) Server: All Versions

Resolution

#%$ These commands must be run as the root user or with sudo privileges #%$ 
 

Standalone

On a stand alone EDR Server, either restart the services from a single command or manually stop and start the services.

• Restart

sudo /usr/share/cb/cbservice cb-enterprise restart

• Start and Stop

1. Stop services

   sudo /usr/share/cb/cbservice cb-enterprise stop
   

2. Confirm services are stopped

   1. ps -ef | grep cb

   2. If anything is returned, kill the processes

      • killall -KILL -u cb

3. Start services

   sudo /usr/share/cb/cbservice cb-enterprise start

Cluster

On a clustered environment stop and start the services using the following commands on the Primary Server only.

1. Stop the cluster

   sudo /usr/share/cb/cbcluster stop

2. Confirm the cluster is stopped
   1. Run the following on each node of the cluster

      • ps -ef | grep cb

   2. If anything is returned, kill the hanging processes

      • killall -KILL -u cb

3. Start the EDR Server

   sudo /usr/share/cb/cbcluster start