Carbon Black Cloud: How to Check for ManifestDownloadFailure Alarms (macOS)

[#1]

Environment

• Carbon Black Cloud Console: All Versions
  • Endpoint Standard
  • Enterprise EDR
  • Audit & Remediation
  • Workload
• Carbon Black Cloud Sensor: 3.5.3.x and Higher
• Apple macOS: All Supported Versions

Objective

Provide steps for checking on ManifestDownloadFailure alarms/errors from a local machine from the content delivery network (https://content.carbonblack.io) which provides additional configuration for 3.5.3.x and higher Sensors

Resolution

1. Launch terminal emulator
2. Check for alarm in SensorAlarms.log

   sudo grep -Ein --color "ManifestDownloadFailure" /Library/Application\ Support/com.vmware.carbonblack.cloud/Logs/SensorAlarms.log

3. Output will show the dates and times of relevant alarms

   <line#>:MM/DD/YY hh:mm:ss [INFO] ... ManifestDownloadFailure, AddDownloadError: Error[Content download failed]

Additional Notes

• Once changes have been made to allow access to content.carbonblack.io, the above error will stop occurring in the logs

Related Content

Carbon Black Cloud: Is access to content.carbonblack.io required?
Carbon Black Cloud: Is the Content Management URL Required for Linux or Mac Sensors?
Carbon Black Cloud: How to Verify Connection to content.carbonblack.io (macOS)
Carbon Black Cloud: How to check current dynamic Sensor Management Content Manifests (macOS)