Where are the agent log files located on the endpoint?
By default, all the Cb Protection agent logs are in /srv/bit9/data.
Do not copy the cache.db directly. It's currently in use by the Cb Protection agent service. Copying it directly from this folder could result to a corrupted or incomplete copy. The path is case sensitive.