Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Carbon Black Cloud: How to check current status of all devices in a Sensor Update Status job

Carbon Black Cloud: How to check current status of all devices in a Sensor Update Status job

Environment

  • Carbon Black Cloud Console: All Versions
    • Audit & Remediation (was CB LiveOps)
    • Endpoint Standard (was CB Defense)
    • Enterprise EDR (was CB ThreatHunter)

Objective

Provide steps to check current status of each Sensor/device_id included in a Sensor Update Status job

Resolution

  1. Log into Console
  2. Navigate to Inventory > choose asset type (Endpoints,Workloads,VDI,etc)
  3. Click on Sensor Update Status tab (under Inventory).
  4. Click the "Export" button under the Actions column.

Additional Notes

Sensor state:
  • NOT_HINTED - This sensor hasn't been asked to update yet.
  • HINTED - This sensor was asked to upgrade but hasn't reported that the upgrade was successful yet.
  • UPDATED - This sensor successfully upgraded the to target sensor version.
  • EJECTED_FROM_BATCH - If a sensor isn't upgraded 72 hours after hinted, remove it from batch.
  • FAILED - This sensor failed to upgrade. There are four reasons that SUS will report for why a sensor failed. Those are:
    • Sensor unresponsive - The job timed out and the sensor never was online for SUS to see that it was ready for a upgrade hint. The sensor was never hinted.
    • No sensor found - Since the Update Job was created this sensor can no longer be found. Most likely the sensor was de-registered.
    • Update stopped by user - The Update Job was stopped by a user from the Sensor Update Status page in the console.
    • Update error - The sensor failed to upgrade to the target version.

Related Content


Was this article helpful? Yes No
100% helpful (2/2)
Article Information
Author:
Creation Date:
‎01-07-2021
Views:
4299
Contributors