Environment
- Carbon Black Cloud Console: All Versions
- Carbon Black Cloud Windows Sensor: All Supported Versions
- Microsoft Windows: All Supported Versions
Symptoms
- Attempt to start AmazonCloudWatchAgent service, but the service will show starting...then stopped....then starting...then stopped....over and over again. It never starts.
- Attempt to start AmazonSSMAgent service, but the service will show starting....then stopped. It never starts.
Cause
Amazon SSM agent & Amazon Cloud watch agent exit when the sensor attempts to inject it's driver into these processes so that it can monitor their behaviors
Resolution
Create a Permission rule Performs any operation > Performs any API operation > Bypass for the following paths:
C:\Program Files\Amazon\AmazonCloudWatchAgent\amazon-cloudwatch-agent.exe
C:\Program Files\Amazon\SSM\amazon-ssm-agent.exe
Related Content
