Access official resources from Carbon Black experts
Cb Response 5.1.1, 5.2.x Cluster Implementations
Note: For standalone implementations, you can follow this guide: Change Server IP Or Domain Name Address (Single Node)
You can use the following steps for changing your server IP in Cb Response. Please note that you will need to have a delay after changing this setting as all endpoints would need to check in first to pull down the new server IP. Any offline endpoints that don't check in will either need to have sensor reinstalled or registry edited to point to the new server.
Warning: Verify the chosen settings sensor checkin url and port. You'll only have one shot to update this setting correctly. A sensor will checkin with the old information that the server is currently on and update that information locally (in the registry for windows). The next time it tries to checkin, it will be to the new server url and port and it will no longer attempt to connect to the old address. This means that if you update this information incorrectly, this will need to be updated by changing the server to that address, or performing Step 3 for all sensors. Changing the group setting in the UI back will only work for sensors had not checked in yet, all others will not get that setting reverted back automatically.
Warning: Support's recomendation is to keep the default sensor communication port, 443. There are additional configuration changes that need to be made in /etc/cb/cb.conf and /etc/cb/nginx/conf.d/ in order for the sensors to communicate on a custom port
Run this after all online sensors have checked in
Stop Cluster "/usr/share/cb/cbcluster stop"
Change the server IP using normal OS commands for configuring the network interface
Update record to point to the new cbserver IP in the UI
Update the IP address of the master node
psql -d cb -p 5002 -c "UPDATE cluster_node_sensor_addresses SET address='<NEW IP>' WHERE node_id=0;"
Update the IP addresses of the minion nodes if applicable.
Note: Minion 1 is Node 1
psql -d cb -p 5002 -c "UPDATE cluster_node_sensor_addresses SET address='<NEW IP>' WHERE node_id=<NODE ID>;"
Update /etc/sysconfig/iptables to accept traffic from new minion IPs if applicable