Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Duplicate Linux Sensors after Upgrade

Duplicate Linux Sensors after Upgrade

Environment

  • Cb Response 5.x Linux sensors 5.2.13 or before
  • Cb Response 6.x Linux sensors 6.1.2 or before

Symptoms

  • After upgrading the Cb Response Linux sensor there are duplicate sensor entries in the UI

Cause

Previously there was an issue capturing the computer SID and this caused it to show up as unknown in DB, this causes a new sensor to be created on upgrade at first check-in with the Cb Response server.

Resolution

Please follow the steps in solution DOC-4619​ to hide old sensors from the sensor page, the data will not be removed but the old sensor entries will be hidden from the UI.

Labels (1)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎12-12-2017
Views:
1068
Contributors