IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

App Control: Agents reporting events with an older CL version

App Control: Agents reporting events with an older CL version

Environment

App Control Console: All Supported Versions

Question

Why are agents reporting events with an old CL version in the console?

Answer

The CL version is included in the event when it gets send from the agents to the console.
Therefore, if the CL version of an agent is restored to an older CL version then the agent will report events starting with this old CL until it gets caught up with the most recent CL version.

Additional Notes

In environments with a very large CL version, it may take some time for an agent to get caught up with the most recent CL.

Possible reasons why the CL version of an agent can go back to an older version:
  • Cache corruption
  • System is re-imaged with an older agent
  • New agent install using an outdate Policy MSI installer
  • Resend of All Policies to the agent was triggered from the console

Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎09-11-2020
Views:
405
Contributors