For troubleshooting purposes, you can initiate an immediate macOS sensor check-in to the Carbon Black EDR server.

You can run a command to dump and collect network event logs, cbdaemon log files, and important sensor and system configurations that can help diagnose sensor issues. The files are packaged up into a single compressed file that you can deliver to Carbon Black for analysis.


  • To dump communication and event tracking logs, open a terminal and issue the following command:
    sudo kill -s USR2 <pid of CbOsxSensorService>