Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Carbon Black Cloud: Where can sensor logs be found for sensors that are partially installed/uninstalled to provide support for troubleshooting?

Carbon Black Cloud: Where can sensor logs be found for sensors that are partially installed/uninstalled to provide support for troubleshooting?

Environment

  • Carbon Black Cloud Senor: All supported versions
  • Microsoft Windows all supported versions

Question

Where can sensor logs be found for sensors that are partially installed/uninstalled to provide support for troubleshooting?

Answer

  • Sensor logs
    • Pre 3.6 - C:\Program Files\Confer
    • Post 3.6 - C:\ProgramData\CarbonBlack\Logs
  • Microsoft Windows Installer Log (msi.log)
    • Pre 3.6 - C:\Program Files\Confer
    • Post 3.6 - C:\ProgramData\CarbonBlack\Logs
  • Sensor Install Log (confer-temp.log). 
    • C:\Users\<user>\AppData\Local\Temp\
    • C:\Windows\TEMP\
    • C:\Users\All Users\AppData\Local\Temp

Additional Notes

  • Please collect available files, and upload to CB Vault
  • If the Sensor Removal Tool is required Upload relevant logs from the resolution section to the CB Vault if available
  • Technical support can then provide the Sensor Removal Tool 
  • Please include the sensor version

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎07-21-2022
Views:
628
Contributors