Environment
- CBC Console: All versions
- CBC Sensor: All Windows versions
Symptoms
- After installing the sensor and waiting several days, there are no "Vulnerabilities" appearing in the Endpoint's details pane; Vulnerabilities section.
- Selecting the "reassess" option never returns an updated date, even after many days.
- The C:\ProgramData\CarbonBlack\Logs\LiveQuery.log contains errors such as:
10/25/22 10:32:58.524: d80 INFO CbProcessHelper::Run: Waiting for output
10/25/22 10:32:58.525: a94 INFO CbProcessHelper::ProcessMonitorLoop: Starting monitor thread (priority level -1) (target pid 1912)
10/25/22 10:33:01.074: d80 INFO CbProcessHelper::Run: Process[1912] exited and all output read.
10/25/22 10:33:01.074: d80 INFO CbProcessHelper::Run: Child process exiting, killing monitor thread.
10/25/22 10:33:01.074: a94 INFO CbProcessHelper::ProcessMonitorLoop: Monitoring complete, closing this thread (target pid 1912)
10/25/22 10:33:01.074: d80 INFO CbProcessHelper::Run: Exiting: Child created[1] m_RetCode[0, 0x0]
10/25/22 10:33:01.137: d80 INFO ReadLiveQueryErrorFilterFile: Acquired query error filter[Cannot start extension manager: Extension not autoloaded] 10/25/22 10:33:01.137: d80 INFO ReadLiveQueryErrorFilterFile: Acquired query error filter[An error occurred during extension manager startup: Required extension not found or not loaded:] 10/25/22 10:33:01.137: d80 INFO ReadLiveQueryErrorFilterFile: Acquired query error filter[Failed to lookup path information for process] 10/25/22 10:33:01.137: d80 INFO ReadLiveQueryErrorFilterFile: Acquired query error filter[Failed to get cwd for]
Cause
This is tracked as a known issue CBC-22192.
Resolution
CBC-22192 backend issue was fixed as of Nov 5th, 2022. There is no need to change/update sensors.
