Security Connect 2021 is coming Jun 3. Register for free today!

EDR: How to Restart Server Services

EDR: How to Restart Server Services

Environment

  • EDR (Formerly CB Response) Server: All Versions

Objective

How to restart EDR on a clustered or standalone server.
 

Resolution

 These commands must be run as the root user or with sudo privileges

 
 

Standalone

On a stand alone server, you can either restart the services from a single command or manually stop and start the services.

  • Restart
sudo service cb-enterprise restart
  • Start and Stop
  1. Stop services
    CentOS/RHEL 6.x: sudo service cb-enterprise stop
    CentOS/RHEL 7.x: sudo systemctl stop cb-enterprise
    
  2. Confirm services are stopped
    1. ps -ef | grep cb
    2. If anything is returned, kill the processes
      • killall -KILL -u cb
  3. Start services
    CentOS/RHEL 6.x: sudo service cb-enterprise start
    CentOS/RHEL 7.x: sudo systemctl start cb-enterprise

Cluster

On a clustered environment you must stop and start the services using the following commands on the master server only.

  1. Stop the cluster
    sudo /usr/share/cb/cbcluster stop
  2. Confirm the cluster is stopped
    1. Run the following on each node of the cluster
      • ps -ef | grep cb
    2. If anything is returned, kill the hanging processes
      • killall -KILL -u cb
  3. Start the server
    sudo /usr/share/cb/cbcluster start

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
75% helpful (3/4)
Article Information
Author:
Creation Date:
‎07-03-2018
Views:
8028
Contributors