Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

EDR: How to Restart Server Services

EDR: How to Restart Server Services

Environment

  • EDR (Formerly CB Response) Server: All Versions

Objective

How to restart EDR on a clustered or standalone server.
 

Resolution

 These commands must be run as the root user or with sudo privileges

 

 

Standalone

On a stand alone EDR Server, you can either restart the services from a single command or manually stop and start the services.

  • Restart
sudo /usr/share/cb/cbservice cb-enterprise restart
  • Start and Stop
  1. Stop services
    sudo /usr/share/cb/cbservice cb-enterprise stop
    
  2. Confirm services are stopped
    1. ps -ef | grep cb
    2. If anything is returned, kill the processes
      • killall -KILL -u cb
  3. Start services
    sudo /usr/share/cb/cbservice cb-enterprise start

Cluster

On a clustered environment you must stop and start the services using the following commands on the Primary Server only.

  1. Stop the cluster
    sudo /usr/share/cb/cbcluster stop
  2. Confirm the cluster is stopped
    1. Run the following on each node of the cluster
      • ps -ef | grep cb
    2. If anything is returned, kill the hanging processes
      • killall -KILL -u cb
  3. Start the EDR Server
    sudo /usr/share/cb/cbcluster start

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
75% helpful (3/4)
Article Information
Author:
Creation Date:
‎07-03-2018
Views:
21058
Contributors