IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

EDR: How to Restart Server Services

EDR: How to Restart Server Services

Environment

  • EDR (Formerly CB Response) Server: All Versions

Objective

How to restart EDR on a clustered or standalone server.
 

Resolution

 These commands must be run as the root user or with sudo privileges

 

 

Standalone

On a stand alone EDR Server, you can either restart the services from a single command or manually stop and start the services.

  • Restart
sudo /usr/share/cb/cbservice cb-enterprise restart
  • Start and Stop
  1. Stop services
    sudo /usr/share/cb/cbservice cb-enterprise stop
    
  2. Confirm services are stopped
    1. ps -ef | grep cb
    2. If anything is returned, kill the processes
      • killall -KILL -u cb
  3. Start services
    sudo /usr/share/cb/cbservice cb-enterprise start

Cluster

On a clustered environment you must stop and start the services using the following commands on the Primary Server only.

  1. Stop the cluster
    sudo /usr/share/cb/cbcluster stop
  2. Confirm the cluster is stopped
    1. Run the following on each node of the cluster
      • ps -ef | grep cb
    2. If anything is returned, kill the hanging processes
      • killall -KILL -u cb
  3. Start the EDR Server
    sudo /usr/share/cb/cbcluster start

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
75% helpful (3/4)
Article Information
Author:
Creation Date:
‎07-03-2018
Views:
21127
Contributors