IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

EDR: Why is the OS Uptime less than Sensor Uptime?

EDR: Why is the OS Uptime less than Sensor Uptime?

Environment

  • EDR Servers:  All
  • EDR Sensors: All

Question

On the EDR console, why would the Operating System Uptime be less than the Sensor Uptime?

Answer

The Operating System uptime may not increase while the endpoint is asleep or hibernating.

Sensor Uptime:
The amount of time since the Carbon Black service started.  
NOTES:
* Because the "Host Uptime" value may not increase when the endpoint is asleep or hibernating, the "Sensor Uptime" value can legitimately be higher than "Host Uptime".
* If the "Sensor Uptime" is consistently a low number, it may indicate an issue with service stability.
Host Uptime:
The amount of time the operating system has been running as reported by the operating system itself.  
NOTE:
* This may not increase when the endpoint is asleep or hibernating.




 

Related Content


Labels (2)
Tags (3)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎08-31-2022
Views:
319
Contributors