IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

Carbon Black Cloud: Where can sensor logs be found for sensors that are partially installed/uninstalled to provide support for troubleshooting?

Carbon Black Cloud: Where can sensor logs be found for sensors that are partially installed/uninstalled to provide support for troubleshooting?

Environment

  • Carbon Black Cloud Senor: All supported versions
  • Microsoft Windows all supported versions

Question

Where can sensor logs be found for sensors that are partially installed/uninstalled to provide support for troubleshooting?

Answer

  • Sensor logs
    • Pre 3.6 - C:\Program Files\Confer
    • Post 3.6 - C:\ProgramData\CarbonBlack\Logs
  • Microsoft Windows Installer Log (msi.log)
    • Pre 3.6 - C:\Program Files\Confer
    • Post 3.6 - C:\ProgramData\CarbonBlack\Logs
  • Sensor Install Log (confer-temp.log). 
    • C:\Users\<user>\AppData\Local\Temp\
    • C:\Windows\TEMP\
    • C:\Users\All Users\AppData\Local\Temp

Additional Notes

  • Please collect available files, and upload to CB Vault
  • If the Sensor Removal Tool is required Upload relevant logs from the resolution section to the CB Vault if available
  • Technical support can then provide the Sensor Removal Tool 
  • Please include the sensor version

Related Content


Was this article helpful? Yes No
0% helpful (0/1)
Article Information
Author:
Creation Date:
‎07-21-2022
Views:
1464
Contributors