Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Carbon Black Cloud: Is There a Log That Details the Sensor Registration Process? (3.4.x.x and Earlier)

Carbon Black Cloud: Is There a Log That Details the Sensor Registration Process? (3.4.x.x and Earlier)

Environment

  • Carbon Black Cloud Sensor: 3.4.x.x and Earlier
  • Microsoft Windows: All Supported Versions

Question

When the verbose MSI log states that registration failed, is there another log that records details of the registration process?

Answer

The confer-temp.log file records details about the registration process, and it is located in one of the following directories
C:\Users\<user>\AppData\Local\Temp\
C:\Windows\TEMP\
C:\Users\All Users\AppData\Local\Temp

Alternately search via cmd.exe
  1. Open cmd.exe
  2. Search for file in user's Temp directory
    cd /d c:\
    dir %TEMP%\confer-temp.log
  3. Search for file across file system if nothing found above
    dir /s confer-temp.log

Additional Notes

  • The precise location can typically be found by typing %temp% in the run box and pressing the Enter key
  • The location is usually determined by the user logged in at the time of the install attempt
  • The confer-temp.log file also contains many useful details about installation of services so is worth reviewing for any install issues

Related Content


Was this article helpful? Yes No
100% helpful (1/1)
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
958
Contributors