RepCLI is a command line tool that superusers can use to locally manage certain Linux sensor functions.
RepCLI is included in Linux sensors beginning with version 2.13. RepCLI is located in /opt/carbonblack/psc/bin/.
To run RepCLI, launch a terminal and navigate to the /opt/carbonblack/psc/bin/ directory. Run RepCLI commands within this terminal; for example, $ sudo ./repcli status. You can get help for a particular command by running the help command and providing the name of that command as an argument. For example: $ sudo ./repcli help status.
The following RepCLI commands are available for Linux sensors:
| Command | Description | Example |
|---|---|---|
| bypass | Enables (1) or disables (0) bypass mode. | $ sudo ./repcli bypass 0 |
| cloud <option> | Supported option: helloSensor checks in with the Carbon Black Cloud console. |
$ sudo ./repcli cloud hello |
| debug | Enables (1) or disables (0) sensor verbose logging. | $ sudo ./repcli debug 0 |
| debug-th | Enables (1) or disables (0) threat-hunter verbose logging. | $ sudo ./repcli debug-th 0 |
| deviceid | Displays device ID | $ sudo ./repcli deviceid |
| displayevents | Streams events to the user. | $ sudo ./repcli displayevents -count 5 |
| find | Returns the reputation data that corresponds to a SHA-256 hash or a filepath | $ sudo ./repcli find cbagentd |
| help | Displays information about RepCLI commands. | $ sudo ./repcli help status |
| registrationid | Displays registrationid | $ sudo ./repcli registrationid |
| status | Displays sensor state values such as version, cloud status, rules status. | $ sudo ./repcli status |
| version | Returns the current product version. | $ sudo ./repcli version |
