- On the sensor that needs troubleshooting, enable debug logging to at least a '5'. Please run the following commands:
reg add HKLM\Software\CarbonBlack\config -v MaxDebugLogSize -t REG_DWORD -d 1000000000 -f
reg add HKLM\Software\CarbonBlack\config -v DebugLevel -t REG_DWORD -d 5 -f
sc control carbonblack 203
- Once done, re-run the LiveQuery command and then pull a new sensordiag. The changes will be denoted by debuglevel in the Sensor.log. OsQuery items should now be showing up as queries are ran.