You can update Linux sensors through the command line.

Procedure

  1. Sign into the workload.
  2. Unpack the agent tar ball into: */var/opt/carbonblack/psc/pkgs/upgrade_staging/*. If you have not previously updated the sensor, this folder does not exist and you must create it.
  3. Run the update script from the /var/opt/carbonblack/psc/pkgs/upgrade_staging location:

    RPM:

    $rpm -U cb-psc-sensor-xxx.rpm

    Note: For the RHEL sensors kit, you must specify the rpm package that corresponds to the distro version that you are installing.

    el6 --> centos/rhel/oracle 6.0-6.x

    el7 --> centos/rhel/oracle 7.0-7.x

    el8 --> centos/rhel/oracle 8.0-8.x

    DEB:

    $dpkg --force-confold -i cb-psc-sensor-xxx.deb

  4. Verify the following:
    • Agent is updated - /opt/carbonblack/psc/bin/cbagentd -v to make sure that the agent matches the version you installed.
    • Kernel or BPF module is loaded
      • Kernel module: Run the following command and verify that there is a 1 in the right column of the output. This shows that the kernel module is loaded and enabled. Other versions of the kernel might display as disabled; this is acceptable.

        Command: lsmod | grep event_collector

        Sample output:  event_collector_2_x_yyyyyy zzzzz 1

      • BPF module: Run the following command and verify that the grep returns a single result with the command event_collector.

        Command: ps -e | grep event_collector

        Sample output: 85150 ? 00:00:05 event_collector

    • Check agent-blade details on the Workloads page in the server console:
      • Updated agent details are displayed
      • Agent checks in with the server at regular intervals