Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Carbon Black Cloud: Linux Sensor Generates No Events or Alerts

Carbon Black Cloud: Linux Sensor Generates No Events or Alerts

Environment

  • Carbon Black Sensor: All Supported Versions
  • Linux: All Supported Versions

Symptoms

  • Linux sensor installed successfully
  • The sensor checks in
  • No events or alerts are seen in the Carbon Black Console related to that sensor
  • No policy actions are taken

Cause

  • This most often happens because the sensor was not installed with the correct Company Code
  • In older versions of the sensor Event collection, alert generation, and policy actions were features only supported on sensor versions 2.7.0.187460 and Higher with some Linux Operating Systems

Resolution

  • Confirm the sensor was installed with the correct Company_Code following these steps
  • Confirm the sensor version is 2.7.0.187460 and Higher
  • Confirm the OS is listed under "Enterprise EDR Supported Distributions and Kernel Versions"  or  "Endpoint Standard Supported Distributions and Kernel Versions" here

Related Content


Was this article helpful? Yes No
67% helpful (2/3)
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
1920
Contributors