How To Collect Sensor Performance Logs (Windows)

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

To collect diagnostics for performance related sensor issues

Environment

• Carbon Black Cloud Sensor: All Supported Versions
• Microsoft Windows: All supported versions

Resolution

Prerequisites 
Ensure troubleshooting steps and information requests documented in KB How to Troubleshoot Sensor Performance Issues have been completed 

Option 1 (Preferred) 

• How to Collect Sensor Performance Logs with Sensor Capture Script

Option 2

• How to Collect Sensor Performance Logs Manually (Windows)
  
  

Additional Information

• Collecting performance logs requires RepCLI Authentication to be  enabled on existing sensor installations if RepCLI was not enabled during the initial sensor install, ProcmonLowAlt.exe.zip must be downloaded, and WPR to be downloaded into C:\Windows\System32