Environment
- EDR(Formerly Carbon Black Response) Server: All Supported Versions
- Clustered Server
Symptoms
- Large number of sensor offline
- Server Timestamps are not same on all nodes of the cluster
- Sensor logs shows sensor checking in, but are not online on GUI
Cause
Server time was out of sync on some nodes of the cluster.
Resolution
Synchronize Linux time on all nodes.
