EDR: How to Collect Linux Sensor Diagnostic Logs

[#1]

Environment

• EDR Linux Sensor: All versions
• Linux: All supported versions

Objective

Collect a Linux sensor's diagnotics.

Resolution

1. For sensors < 6.2.1 : from a command line, execute:

sudo /opt/cbsensor/sensordiag.sh

2. For sensors > 6.2.1 : from a command line, execute:

sudo /opt/carbonblack/response/bin/sensordiag.sh

Additional Notes

• The resulting file will be generated in the current working directory.
• Resulting filename format:  sensordiag_(hostname)_(date).tgz 
• Sensor reports under 25 MB can be attached directly to a VMWare Technical Support case. 
• Files larger than 25 MB should be uploaded to CB Vault.

Related Content

• CB Response: How to generate Apple MacOS sensor report 6.1.3 and earlier
• EDR: Generate Apple MacOS Sensor report in 6.2.x and later
• EDR: How to Collect Windows Sensor Diagnostics Logs (6.1.13)
• EDR: How to generate sensor logs
• EDR: How To Generate Server Diagnostic Logs for On-Prem
• Collecting logs for BSOD/Kernel Panic Issues [Sensor - Cb Response]
• Collecting logs for System Hang Issues [Sensor - Cb Response]
• EDR Sensor: How to collect logs for performance-related issues (Windows)