Environment
- Carbon Black Defense PSC Linux Sensor 2.1.0.149
- CentOS, RHEL 6 & 7
Question
How do I manually retrieve the PSC Linux logs?
Answer
- Bring up a bash terminal
- Archive the /var/opt/carbonblack/psc/ directory:
sudo tar cvf $(hostname --long)_$(date +"%Y-%b-%d_%H-%M-%S")_logs.tgz /var/opt/carbonblack/psc/log
- Retrieve the file Hostname_YYYY-MMM-DD_HH-MM-SS_logs.tgz
- Upload the file via Cb Vault (https://community.carbonblack.com/groups/cb-vault) or Smartfile link
Additional Notes
For newer sensors, please refer to this
KB
Related Content