Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

How To Remove the Event Forwarder on a Minion

How To Remove the Event Forwarder on a Minion

Version

All versions of the cb-event-forwarder for Cb Response

Topic

This will prevent cb-event-forwarder from starting on boot on minion where is is not necessary

Warning: Do not perform these steps on the master unless you want to disable event forwarding

Steps

  1. Navigate to /etc/init as root
  2. Move or Remove cb-event-forwarder.conf to a backup location to disable auto startup:
    mv /etc/init/cb-event-forwarder.conf ~/backup
    OR
    rm /etc/init/cb-event-forwarder.conf
  3. Remove cb-event-forwarder completely from the minion (Optional):
    1. Remove application:
      yum remove cb-event-forwarder
    2. Remove leftover files:
      rm -rf /etc/cb/integrations/event-forwarder
Labels (1)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎06-27-2017
Views:
640
Contributors