Environment
- Carbon Black Cloud Sensor: 3.3.x.x and Higher
- Microsoft Windows: All Supported Versions
Objective
Gather logs for Support using RepCLI commands
Resolution
Sensors 3.6 and Higher:
- Launch a Command Prompt on the affected machine.
- Run commands:
cd C:\Program Files\Confer
repcli capture c:\temp -- Change to desired location
Sensors Prior to 3.6:
- Launch a Command Prompt on the affected machine
- Run commands:
cd C:\Program Files\Confer
repcli capture
- The captured logs will be written to C:\Windows\Temp\confer-temp and named confer-temp.zip
Additional Notes
- The "repcli capture" command does not require authentication or administrator rights on the machine
- The "repcli capture" command gathers the same data as running the "sc control cbdefense 128" command
- The "repcli capture" command requires Cb Defense Service to be running
Related Content
