Cb Response - Generate and Collect sensor diagnostics
Log In or Register to download the BES file, and more.

0 Votes

Description

This Task can be used to generate Carbon Black Response Sensor Diagnostics on a given endpoint and upload it to the BigFix Server for troubleshooting purposes.

Property Details

ID21663
StatusProduction - Fully Tested and Ready for Production
TitleCb Response - Generate and Collect sensor diagnostics
DomainBESC
CategoryTroubleshooting
SourceCarbon Black
Source SeverityN/A
Source Release Date1/21/2016 12:00:00 AM
KeywordsIBM BigFix & Carbon Black Integration Content
Is TaskTrue
Added by on 9/16/2016 11:50:38 AM
Last Modified by on 9/16/2016 11:50:38 AM
Counters 3045 Views / 122 Downloads
User Rating 1 star 2 star 3 star 4 star 5 star * Average over 0 ratings. ** Log In or Register to add your rating.

Relevance

Used in 73 fixlets and 6 analyses   * Results in a true/false
Show indented relevance
version of client >= "9.0"
Used in 1 fixlet   * Results in a true/false
Show indented relevance
if (windows of operating system) then ((state of service whose (display name of it = "Carbon Black Sensor") = "Running") | False) else (exists file "/opt/cbsensor/sensordiag.sh")
Used in 4 fixlets and 1 analsis   * Results in a true/false
Show indented relevance
(windows of operating system) OR (exists match (regex "Linux CentOS (6|7)") of name of operating system) OR ((name of operating system starts with "Linux Red Hat") AND (exists file "/etc/redhat-release" whose (exists line whose (exists match (regex "Red Hat Enterprise Linux (Client|Server|Workstation) release 6|7") of it) of it) AND NOT exists file "/etc/vmware-release" whose (exists line whose (it contains "VMware ESX") of it) AND NOT exists file "/etc/enterprise-release" whose (exists line whose (it contains "Enterprise Linux Enterprise Linux") of it)))

Actions

Action 1 (default)

Action Link Click here to deploy this action.
Script Type BigFix Action Script
if {windows of operating system}
// Force Carbon Black Sensor Check-In
    waithidden sc control carbonblack 200

// Generate Carbon Black Sensor Diagnostics
    waithidden sc control carbonblack 201
    
// set max size to 15 MB to prevent too much data. If the zip file is to bigger than 15 MB the upload won't occur
    setting "_BESClient_ArchiveManager_MaxArchiveSize"="15728640" on "{parameter "action issue date" of action}" for client
    setting "_BESClient_ArchiveManager_OperatingMode"="2" on "{parameter "action issue date" of action}" for client
    setting "_BESClient_ArchiveManager_FileSet-client"="{pathname of windows folder & "\CarbonBlack\Diagnostics\*.*"}" on "{parameter "action issue date" of action}" for client

// upload results
    archive now
else
// Generate Carbon Black Sensor Diagnostics
    wait sh /opt/cbsensor/sensordiag.sh

// set max size to 15 MB to prevent too much data. If the zip file is to bigger than 15 MB the upload won't occur
    setting "_BESClient_ArchiveManager_MaxArchiveSize"="15728640" on "{parameter "action issue date" of action}" for client
    setting "_BESClient_ArchiveManager_OperatingMode"="2" on "{parameter "action issue date" of action}" for client
    setting "_BESClient_ArchiveManager_FileSet-client"="{pathname of client folder of current site & "/sensordiag*.tgz"}" on "{parameter "action issue date" of action}" for client

// upload results
    archive now
endif
Success Criteria

This action will be considered successful when the applicability relevance evaluates to false.


Sharing

Social Media:
Share this page on Yammer

Comments

Log In or Register to leave comments!