IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

EDR: Re-installed Sensor Reports Uninstall Pending

EDR: Re-installed Sensor Reports Uninstall Pending

Environment

  • EDR Sensor: All Supported Versions
  • EDR Server: All Supported Versions 
 

Symptoms

  • Sensor status reports "Uninstall Pending"
  • Reinstall of sensor does not update "Uninstall Pending" status

Cause

  • Carbon Black has not yet identified the source of this issue

Resolution

  • SSH into the EDR Primary Server and issue the following commands:
    1. psql -p 5002 cb -c "update sensor_registrations set uninstall=false where id = <sensor-id-here>";
    2. psql -p 5002 cb -c "update sensor_registrations set uninstalled=true where id = <sensor-id-here>";
    3. psql -p 5002 cb -c "update sensor_action set uninstall=false where id = <sensor-id-here>";
    4. /usr/share/cb/cbdatagrid evict SensorAction <sensor-id here>

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎01-02-2019
Views:
1569
Contributors