Carbon Black Cloud: Where are the sensor logs in Windows Sensor 3.6 and above?

[#1]

Environment

• Carbon Black Cloud Windows Sensor: 3.6 and Higher
• Microsoft Windows: All Supported Versions

Question

Where are the sensor logs located in Sensor 3.6 and above?

Answer

• Sensor Logs are stored in %ProgramData%\CarbonBlack
• The cb-installer-x-x-x log (formerly confer-temp log) remains in either %LocalAppData\Temp or %SystemRoot%\Temp depending on how the sensor was installed

Additional Notes

• Please continue to use repcli capture to collect sensor logs when possible. See Carbon Black Cloud: How To Collect Sensor Logs Locally (Windows) for details
• If repcli capture cannot be used (due to corrupt or incomplete install), please see Carbon Black Cloud: Unable to save the Windows Sensor logs on 3.6 and above

Related Content

Carbon Black Cloud: Unable to save the Windows Sensor logs on 3.6 and above
Carbon Black Cloud: How To Collect Sensor Logs Locally (Windows)
Carbon Black Cloud: How To Collect Sensor Logs Locally (Mac)
Cb Defense: What is the RepCLI Utility?
Carbon Black Cloud: How to Get Started With RepCLI