Purpose: To improve the performance of Linux systems running Carbon Black App Control.

Description: Improves the performance of computers running Linux by ignoring writes of specified files or by specified processes. Included are system processes and files as well as some common applications.

Enabled by Default: No
Platform: Linux
Minimum Agent Version Required: 7.2.0

The Edit Rapid Config page for the Linux System Performance Rapid Config

Use Cases

<Add info>

Rapid Config Settings

As with most rapid configs, you can:

  • Enable or disable the rapid config.

  • Specify what policies the rapid config applies to.

Uninteresting Linux System Files

Use this group to specify uninteresting system files that will be ignored.

The Uninteresting Linux System Files settings for the Linux System Performance Rapid Config

*Ignore Writes To Uninteresting Linux System Files:
Should modification of the specified files be ignored in order to improve performance?
Files To Ignore:
Carbon Black App Control will ignore modification of the specified files. You can add or remove items from this list.
Modification Of Files Specified Here Will Be Analyzed:
Carbon Black App Control will analyze modification of files specified here. You can add or remove items from this list.
Modification By The Processes Specified Here Will Be Analyzed:
Carbon Black App Control will analyze modification of files by processes specified here. You can add or remove items from this list.

Linux System Processes

Use this group to specify system processes to be ignored when they modify files.

The Linux System Processes settings for the Linux System Performance Rapid Config

*Ignore Writes By System Processes:
Should modification of files by these processes be ignored in order to improve performance?
Processes To Ignore:
Carbon Black App Control will ignore modification of files by the specified processes. You can add or remove items from this list.
  • /sbin/auditd
  • /sbin/rsyslogd
  • /usr/lib/systemd/*
Modification Of Files Specified Here Will Be Analyzed:
Carbon Black App Control will analyze modification of files specified here. You can add or remove items from this list.
Modification Of Files Specified Here Will Be Analyzed:
Carbon Black App Control will analyze modification of files by processes specified here. You can add or remove items from this list.

GCC

Use this group to specify intermediate GCC files that will be ignored.

The GCC settings for the Linux System Performance Rapid Config

*Ignore GCC Intermediate Files:
Should modification of the specified files be ignored in order to improve performance?
GCC Files To Ignore:
Carbon Black App Control will ignore modification of the specified files. You can add or remove items from this list.
  • *.a
  • *.d
  • *.o
Modification Of GCC Files Specified Here Will Be Analyzed:
Carbon Black App Control will analyze modification of files specified here. You can add or remove items from this list.
Modification Of GCC Files By Processes Specified Here Will Be Analyzed:
Carbon Black App Control will analyze modification of files by processes specified here. You can add or remove items from this list.

Chef

Use this group to specify Chef processes and files to be ignored.

The Chef settings for the Linux System Performance Rapid Config

*Ignore Chef Server Process Writes:
Should modification by Chef server processes be ignored in order to improve performance?
Chef Server Processes To Ignore:
Carbon Black App Control will ignore modifications by the specified files. You can add or remove items from this list. You should verify that the paths match your Chef configuration. Default entry is: /opt/chef-server/*
Modification Of The Files Specified Here By The Chef Processes Will Be Analyzed:
Carbon Black App Control will analyze modification of files specified here. You can add or remove items from this list.
Modification Of Files By Processes Specified Here Will Be Analyzed:
Carbon Black App Control will analyze modification of files by processes specified here. You can add or remove items from this list.
*Ignore Chef Repo Files:
Should modification the specified Chef Repo files be ignored in order to improve performance?
Chef Repo Files To Ignore:
Carbon Black App Control will ignore modifications by the specified files. You can add or remove items from this list. You should verify that the paths match your Chef configuration. The default entry is: */chef-repo/*
Modification Of The Files Specified Here By The Chef Processes Will Be Analyzed:
Carbon Black App Control will analyze modification of files specified here. You can add or remove items from this list. The default entry is: */chef-repo/*.rb
Modification Of Files By Processes Specified Here Will Be Analyzed:
Carbon Black App Control will analyze modification of files by processes specified here. You can add or remove items from this list.

Puppet

Use this group to specify Puppet files to be ignored.

The Puppet settings for the Linux System Performance Rapid Config

*Ignore Puppet Files:
Should modification of the specified Puppet files be ignored in order to improve performance?
Puppet Files To Ignore:
Carbon Black App Control will ignore modifications by the specified files. You can add or remove items from this list. You should verify that the paths match your Puppet configuration. The default file list is as follows:
  • /etc/puppetlabs/code/environments/production/modules/*
  • /etc/puppetlabs/code/modules/*
  • /etc/puppetlabs/puppet/*
  • /opt/puppetlabs/puppet/modules/*
Modification Of The Files Specified Here Will Be Analyzed:
Carbon Black App Control will analyze modification of files specified here. You can add or remove items from this list.
Modification Of Files By Processes Specified Here Will Be Analyzed:
Carbon Black App Control will analyze modification of files by processes specified here. You can add or remove items from this list.

VirtualBox

Use this group to specify VirtualBox files to be ignored.

The VirtualBox settings for the Linux System Performance Rapid Config

*Ignore VirtualBox Files:
Should modification of the specified VMWare files be ignored in order to improve performance?
VirtualBox Files To Ignore:
Carbon Black App Control will ignore modifications by the specified files. You can add or remove items from this list. The following are listed by default:
  • *.vbox*
  • *.vdi*/Logs/*
  • */Snapshots/*
Modification Of The Files Specified Here Will Be Analyzed:
Carbon Black App Control will analyze modification of files specified here. You can add or remove items from this list.
Modification Of Files By Processes Specified Here Will Be Analyzed:
Carbon Black App Control will analyze modification of files by processes specified here. You can add or remove items from this list.

VMWare

Use this group to specify VMWare files to be ignored.

The VMware settings for the Linux System Performance Rapid Config

*Ignore VMWare Files:
Should modification of the specified VMWare files be ignored in order to improve performance?
VMWare Files To Ignore:
Carbon Black App Control will ignore modifications by the specified files. You can add or remove items from this list. The following files are listed by default:
  • *.nvram
  • *.vmdk
  • *.vmem
  • *.vmsd
  • *.vmsn
  • *.vmss
  • *.vmxf
Modification Of The Files Specified Here Will Be Analyzed:
Carbon Black App Control will analyze modification of files specified here. You can add or remove items from this list.
Modification Of Files By Processes Specified Here Will Be Analyzed:
Carbon Black App Control will analyze modification of files by processes specified here. You can add or remove items from this list.

Jenkins

Use this group to specify Jenkins files to be ignored.

The Jenkins settings for the Linux System Performance Rapid Config

*Ignore Jenkins Files:
Should modification of the specified Jenkins files be ignored in order to improve performance?
Jenkins Files To Ignore:
Carbon Black App Control will ignore modifications by the specified files. You can add or remove items from this list. The following is listed by default: */jenkins/jobs/*
Modification Of The Files Specified Here Will Be Analyzed:
Carbon Black App Control will analyze modification of files specified here. You can add or remove items from this list.
Modification Of Files By Processes Specified Here Will Be Analyzed:
Carbon Black App Control will analyze modification of files specified here. You can add or remove items from this list.

Other

Use this group to specify other files to be ignored.

The Other settings for the Linux System Performance Rapid Config

*Ignore Other Files:
Should modification of the specified files be ignored in order to improve performance?
Other Files To Ignore:
Carbon Black App Control will ignore modifications by the specified files. You can add or remove items from this list.
Modification Of The Files Specified Here Will Be Analyzed:
Carbon Black App Control will analyze modification of files specified here. You can add or remove items from this list.
Modification Of Files By Processes Specified Here Will Be Analyzed:
Carbon Black App Control will analyze modification of files by processes specified here. You can add or remove items from this list.