Carbon Black Cloud: Windows sensor's db_rep* files grow up to 3+ GB in size.

[#1]

Environment

• Carbon Black Cloud Sensor: 3.6.x and earlier
• Microsoft Windows: All Supported Versions

Symptoms

Windows sensors db_rep* files grow up to 3+ GB in size

Cause

This is caused by a known issue (DSEN-10830). 

Resolution

This issue (DSEN-10830) is fixed in the 3.7.0.1253 and higher Windows sensors.

Additional Notes

1. New size limits should be lower and are based on a calculation on number of hashes rather than just pure byte size of the files.
2. db_rep file locations:
   • Sensor Version 3.6.x:

C$\Program Files\Confer
db_rep
db_rep.backup
db_rep.safebkp

• Sensor Version 3.7.x and Higher:

C:\ProgramData\CarbonBlack\DataFiles
db_rep
db_rep.backup
db_rep.safebkp

Related Content

Endpoint Standard: Large db_rep File Growth / Disk Space Consumption With Splunk App