Access official resources from Carbon Black experts
Warning: This will irrecoverably remove data from the Cb Response server. After removing this data, you will receive a 404 page when attempting to view binary details pages older than MaxEventStoreDays and this data will no longer appear in the Binary Search
Cb Response 5.x, 6.1
This will purge cbmodule data from the solr database located at /var/cb/data/solr5/cbmodules/ (for 5.x this is located at /var/cb/data/solr/cbmodules/).
grep MaxEventStoreDays /etc/cb/cb.conf
Warning: Binaries older than this set value will lead to 404 pages
curl http://127.0.0.1:8080/solr/cbmodules/update?commit=true -H "Content-Type: text/xml" -d "<delete><query>last_seen:[* TO NOW-XXDAYS]</query></delete>"
Warning: This will prevent alerts on feeds with score changes from this past data.
How to automate this process: How To Enable Automated Cbmodule Purging
Warning: cbmodules is not the same as the modulestore files that are the binaries themselves. Here is how you purge this data: How To Purge Storefile (Modulestore Binary) Data
Copyright © 2005-2023 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries.