EDR: How To Generate Server Diagnostic Logs for On-Prem
EDR: All versions
Generate a server-side cbdiag report from any EDR server (Primary or Secondary) and send it to Carbon Black for troubleshooting.
Log into the command line interface (CLI) of the Primary or Secondary server.
Change directory to a partition with sufficient available disk space.
sudo /usr/share/cb/cbdiag --post
Once uploaded, delete the file from the server in the same directory the command was run
Verify there is sufficient disk space before running this command.
Repeat these steps for all Primary and Secondary Servers as needed.
The Server may become unresponsive if there is not enough disk space. /tmp is used as a working directory to gather the report. If /tmp does not have enough space, specify alternative working directory: