Browse your product documentation including release notes and installers
This document explains the Carbon Black and Syslog integration procedures.
We have had our Response server sending data to our Arcsite server for years. Recently the other team indicates the feed has stopped.
I checked and there doesn't seem to be any errors and the /var/log/cb/notifications directory is populated with up to date files with no errors.
What commands or logs can I look in to see if the data is actually being sent or attempting to be sent from my master server.