After you integrate the Carbon Black App Control server with the Carbon Black EDR server, Carbon Black App Control console pages show Carbon Black EDR sensor details when they are available.

Procedure

  1. In the Carbon Black App Control console menu, click Assets > Computers.
  2. On the Saved Views menu, select Carbon Black EDR Deployments to see computers that have a Carbon Black EDR sensor. This view shows the Carbon Black EDR sensor version and its current status.
  3. Click the hyperlinked Computer Name to see more Carbon Black EDR sensor details on the Computer Details page. The Carbon Black EDR tab reports the presence, version, status, and other details of any Carbon Black EDR sensor that is installed on a computer that is running the Carbon Black App Control agent. If a Carbon Black EDR server is not configured or the computer is not running a Carbon Black EDR sensor, this view shows Not installed. By default, the Carbon Black App Control server checks Carbon Black EDR status every 30 minutes.
    The Carbon Black EDR tab also provides a More information link to the Sensors page in the Carbon Black EDR console.
    The following table describes the information that is available on the Carbon Black EDR tab for Carbon Black App Control Computer Details pages. This information currently shows for Windows agents only. macOS and Linux agents report that Carbon Black EDR information is Unknown.
    Table 1. Carbon Black EDR tab fields on the App Control Computer Details page
    Field Description
    Sensor Version The version of the Carbon Black EDR sensor that is installed on this computer.
    Sensor Status Last Status (on Details page) The last Carbon Black EDR sensor status for this computer, as reported by the Carbon Black App Control agent to the Carbon Black App Control server. The Carbon Black App Control server checks Carbon Black EDR status every 30 minutes. Status changes might be temporarily out of sync.

    The possible values for Carbon Black EDR status are:

    • Unknown
    • Installed, initializing – sensor installed but not fully initialized
    • Installed, running
    • Installed, not running
    • Not installed
    • Stopped

    On the Details page, the Last Status field on the Carbon Black EDR tab is similar to Sensor Status in the table. However, it does not appear if sensor status is Unknown . Its possible values are:

    • Running
    • Service not running
    • Kernel not running
    • Stopped
    Note: In addition to a 30-minute or less gap between sensor installation and Carbon Black App Control polling of Carbon Black EDR status, status continues to report as Not installed until the Carbon Black EDR sensor connects to the Carbon Black EDR server and receives a sensor id. If the Carbon Black App Control agent is offline or uninstalled, the last Carbon Black EDR sensor status reported by the agent is displayed in the Carbon Black App Control console, even if sensor status changes.
    Uptime Number of minutes and hours that the Carbon Black EDR sensor has been running since it was last started.
    Registration Time The date and time the Carbon Black EDR sensor registered with its server.
    Last Checkin The date and time the Carbon Black EDR sensor on this computer last checked in with its server.
    Next Checkin The date and time of the next scheduled server checkin for the Carbon Black EDR sensor.
    More Information Connects to the Login page of the Carbon Black EDR server that is configured on the System Configuration page Licensing tab. Logging in takes you to the Sensors page in Carbon Black EDR, so you can view additional details about this computer.
    Note: You must have valid login credentials for the Carbon Black EDR server to successfully open the Carbon Black EDR console.