IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

EDR: How to Start, Stop and Restart EDR Application Services

EDR: How to Start, Stop and Restart EDR Application Services

Environment

  • EDR 7.4.0 and Higher

Objective

To start or stop the cb-enterprise (EDR) services on the command line.

Resolution

Standalone Server

  1. Log into the stand-alone server 
  2. Service commands
    • To start services, run:
      sudo /usr/share/cb/cbservice cb-enterprise start
  • To stop services:
    sudo /usr/share/cb/cbservice cb-enterprise stop
  • To restart services
    sudo /usr/share/cb/cbservice cb-enterprise restart


Clustered Environment

  1. Log into the Primary server
  2. Service Commands
    • To start the Cluster
      /usr/share/cb/cbcluster start
    • To stop the Cluster
      /usr/share/cb/cbcluster stop
    • To restart the cluster
      /usr/share/cb/cbcluster stop && /usr/share/cb/cbcluster start

Additional Notes

  • cbcluster should always be used for clustered environments. If a single node needs to be taken down for maintenance, the whole cluster needs to be taken down as the Datagrid and RabbitMQ communication will break. 
  • These commands replace the older service and systemctl commands that were previously used to start and stop EDR.  

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎08-18-2021
Views:
1649
Contributors