You can use this procedure to determine current status of background scans on Windows endpoints using RepCLI.

Note:
  • Because the repcli status command does not require authentication, it can be run on any Windows sensor that includes RepCLI.
  • You can use RepCLI to launch an on-demand scan that carries out the same function as an expedited background scan on a specific drive, directory, or file.
  • On-demand scans launched by RepCLI, and all background scans that run based on Policy, are logged in the Windows Application Logs under Event ID 17.
  • Total Files Processed shows the number of files that the background scan has scanned since this instance of RepMgr started. This value is not persisted across restarts.

Prerequisites

See Background Scans for general information regarding how background scans work in Carbon Black Cloud. See Managing Sensors by using RepCLI for more information about RepCLI.

Use this procedure in the following environment:
  • Carbon Black Cloud Windows sensor: 3.3.x.x and Higher
  • Endpoint Standard
  • Microsoft Windows (all supported versions)

Procedure

  1. Open a command prompt on the machine in question.
  2. Navigate to the Confer Directory.
    cd C:\Program Files\Confer
  3. Run the following command:
    repcli status
  4. While the scan is running, the General Info section includes Background Scan Status, total files processed, and current directory.

Results

The General Info section includes Background Scan Status, total files processed, and current directory (if still running).

General Info:
        Sensor Version[3.3.0.984]
        Local Scanner Version[4.9.0.264 - ave.8.3.52.150:avpack.8.4.3.24:vdf.8.15.15.224]
        Sensor State[Enabled]
        Details[]
        Kernel File Filter[Connected]
        Background Scan[In Progress]
        Total Files Processed[426]  Current Directory[C:\Program Files\Common Files\VMware\InstallerCache]
        Sensor Restarts[4] LastReset[not set]