EDR: amqp/RabbitMQ rejecting messages

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

The /var/log/cb/enterprise/enterprise.log file is flooded with the following WARNING logs:

WARNING amqp: Rejecting message with delivery tag"<increasing tag#>" for reason of having no callbacks.

Environment

• EDR Server: 6.x
• EDR Server: 7.x

Cause

This is due to a product issue being investigated and fixed in CB-30040.

Resolution

• Due to the extremely rare frequently of this issue, a short term solution is to restart cb-enterprise services.
• For the long term solution: a target release date or version is not known at this time. Once it is known, CB Support will update this article.