With the release of the Linux 2.15.0+ sensor, Audit and Remediation and Enterprise EDR are supported on the Linux platform and are automatically installed together with the sensor.

Note:
  • You cannot install a subset of these components, but you can remove unwanted features after installation.
  • The next time you upgrade the sensor, any missing components will be reinstalled.
  • For sensor versions earlier than 2.15.0, you can manually customize the installer package.

To remove either component from the platform, run the following commands:

Procedure

  1. $rm -fr /opt/carbonblack/psc/blades/<undesired_blade>
  2. $systemctl service cbagentd restart

    For older distributions, run service restart cbagentd instead.