Unable to Export EDR Sensor List to a CSV File

Products

• Carbon Black EDR
• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Due to a large list of sensors, the default limitations to export sensors to a CSV file need to be ignored.

Environment

Carbon Black EDR (formerly Cb Response)

Resolution

There are a few methods to bypass the default settings to export the list of sensors to a CSV file.

• After authenticating to the EDR server, open the following URL in another tab.  It should provide a CSV file of sensors.
  

  https://<EDR server IP address>/api/v2/sensor?format=csv

   

• Increase the page limit in /etc/cb/cb.conf if needed and restart cb-enterprise or cbcluster.
  

  SensorUnpagedFetchLimit=102000

   

• Consider decreasing the sensor list size by exporting each of the Sensor Groups separately to join within a CSV program.

Additional Information

• User Guide 7.8.0 Exporting Sensor Data