Version
Cb Sensor 5.x
Issue
Cb sensor health score message for sensors - "netmon stream driver failure."
Symptoms
Run this command in an elevated cmd prompt:
sc query cbstream
If it returns a state of "Stopped"
then run this command:
net start cbstream
and check for errors.
Cause
A required service "Base Filtering Engine" was disabled.
Solution
The Base Filtering Engine service is required to be running in order for the Carbon Black network filter to be loaded.
Enable and start the "Baseline Filter" service. Once started, then run as administrator:
net start cbstream
and confirm its running with
sc query cbstream
