Environment
- Carbon Black Cloud Sensor: All Versions up to 2.9.0
- Linux OS: All Supported Versions
Symptoms
- Linux sensor exceeding 4gb of disk space
- "psc_minibatch" files not being deleted
Cause
Sensor's event files were moved while sensor was running.
Resolution
- Uninstall the sensor on the effected systems and completely remove anything in the /var/opt/carbonblack/psc/blades/E51C4A7E-2D41-4F57-99BC-6AA907CA3B40 directory.
- Reinstall sensor
- Avoid moving any files while the sensor is actively running
Additional Notes
The upcoming 2.9.1 sensor will have additional code in place to prevent this behavior. This is being tracked under UAV-1850.
Related Content
