Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

EDR: How long will a cluster gather data for after its license expires?

EDR: How long will a cluster gather data for after its license expires?

Environment

  • EDR (formerly CB Response): 6.x and Higher

Question

How long will a cluster gather data for after its license expires?

Answer

  • An on-prem EDR cluster with an expired license will continue to collect data from all sensors for an additional 30 days.
  • After 30 days post-expiration, the cluster will no longer collect data. 

Additional Notes

  • Any linux sensors will that check in after the license has been expired for more than 30 days will need to be restarted due to CB-31080
  • Due to a known issue (CB-17129), data is still transferred over the network after the post-30 days have expired. The cluster rejects that data as expected, but the sensor tries to re-send it over and over, increasing the amount of data. This issue is resolved in Server version 6.2.4. 

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
100% helpful (2/2)
Article Information
Author:
Creation Date:
‎11-21-2018
Views:
975
Contributors