logo

Knowledge Base

Access official resources from Carbon Black experts

IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

EDR: Linux Sensor Filling Messages Log with "ec_obtain_next_cbevent count too small"

EDR: Linux Sensor Filling Messages Log with "ec_obtain_next_cbevent count too small"

Environment

  • EDR Sensor: 7.1.0 and below
  • Linux: All

Symptoms

Disk is filling or seeing large /var/log/message files filled with a message similar to this 
kernel: cbsensor_2_3_859574: ec_obtain_next_cbevent count too small: 196, 491


 

Cause

CB-39985

Resolution

  • Upgrade the Linux sensor to 7.1.1

Labels (2)
Labels:
Was this article helpful? Yes No
No ratings
Article Information
Author:
CB_Support
Creation Date:
‎10-28-2022
Views:
308
Contributors
logo

Copyright © 2005-2023 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries.