How To Collect Nettrace logs

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

How To Collect Nettrace logs

Environment

• Carbon Black Cloud Sensor: All Supported Versions

Resolution

• Create enablenettrace.json file in a folder with the following content.

{
	"Version": "1.0",
	"ConfigProps": 
	[ 
		{
			"Name": "NetTrace", 
			"Data": "true"
		} 
	]
}

• Run repcli unlock <uninstall code> to temporarily enable certain restricted repcli commands
• Run repcli addpolicy psc <full-path-to-json-file>
• Wait for couple of minutes, then the nettrace.log will be created in confer directory.