cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
IMPORTANT: Currently some Knowledge Base content may be unavailable. We are working diligently to restore these articles and appreciate your patience.

EDR: How To Generate Server Diagnostic Logs for On-Prem

EDR: How To Generate Server Diagnostic Logs for On-Prem

Environment

  • EDR: All versions
  • On-Prem Installation

Objective

Generate a server-side cbdiag report from any EDR server (Primary or Secondary) and send it to Carbon Black for troubleshooting.

Resolution

  1. Log into the command line interface (CLI) of the Primary or Secondary server.
  2. Change directory to a partition with sufficient available disk space.
  3. Run:
sudo /usr/share/cb/cbdiag --post

Additional Notes

  • Verify there is sufficient disk space before running this command.
  • Repeat these steps for all Primary and Secondary Servers as needed.
  • The Server may become unresponsive if there is not enough disk space. /tmp is used as a working directory to gather the report. If /tmp does not have enough space, specify alternative working directory:
sudo /usr/share/cb/cbdiag --tmpdir=/new/temp/directory --post
  • Completed reports are saved in the current working directory. The report must be manually deleted once uploaded
  • Required disk space will vary depending on the amount of data and logs.
  • The resulting cbdiag report will be automatically uploaded to Carbon Black's servers for troubleshooting purposes when using the --post flag.
  • To reduce the size of logs, limit the number of days to collect using the --no-old-logs flag
sudo /usr/share/cb/cbdiag --no-old-logs=1

 

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
100% helpful (1/1)
Article Information
Author:
Creation Date:
‎11-21-2018
Views:
4245