This section describes sensor-related settings in the cb.conf file. CacheDbWriteBatchSizeThis parameter sets the maximum number of queued db writes before a bulk write occurs. CacheDbWriteDelaySecThis parameter sets the time in seconds to queue up asynchronous cache db writes and then perform a bulk write to postgresql db. CoreServicesEventlogBytesCapThis parameter sets the default value for maximum bytes (157286400 or 150MB) that can be upload by a group of sensors that will check in within the next 465 seconds. DataGridSensorActivityTTLSecThis parameter sets the time in seconds for a sensor activity log entry to live before it is removed. DatastoreReservationTimeoutMsThis parameter sets the length of time the throttle queue reservation is valid before expiring. DatastoreSubmitQMemoryPercentThis parameter sets the memory used by the front-end throttle queue, as percentage of JVM memory. DatastoreSubmitTimeoutMsThis parameter sets the time (in milliseconds) to wait to reserve data in the front-end throttle queue before timing out. EventExclusionsEnabledIf set to True, this setting enables a console feature that lets you exclude the collection of certain process events from macOS hosts based on the path of the parent process. EventlogLegacyThrottleMaxRatioSee EventlogLegacyThrottleMinRatio. EventlogLegacyThrottleMinRatioPart of the algorithm to calculate throttle for legacy sensors relies on these settings. EventlogLegacyThrottleMultiplierSee EventlogLegacyThrottleMinRatio. EventLogThresholdAgeSecondsThis parameter sets the minimum age of sensor event log to cache before sending to the server. EventLogThresholdSizeBytesThis parameter sets the minimum size of sensor event log to cache before sending to the server. GraphiteReportingIntervalSecThis parameter sets the time between each attempt of sensor services to report directly to a graphite server that is defined in cb.conf with the GraphiteHost config option. OptimizedVdiIf True, only looks up a sensor through VDI if it wasn't already found. RetryAfterMultiplierIf the value is not 1.0, modifies the "retry-after" calculation that occurs when the front-end throttle queue is full. SecureVdiOnly looks up a sensor through VDI if it has a matching sensor group. SensorCheckinDelayRateThis parameter sets the maximum number of check-ins per second per minion. SensorCheckinDelaySecSensor checkin delays are no longer variable and are now constant, set by this parameter. SensorCheckinDelaySecOverrideThis setting overrides the calculated check-in delay. SensorCheckinDelayVariancePctThis setting is a smoothing factor for determining the next check-in for individual sensors. SensorServicesIPSets the listening address for sensor services. SensorServicesLoggerConfComplete path to the logging configuration file for sensor services. SensorServicesPidFileThis parameter specifies the PID file for the sensor services gunicorn process. SensorServicesPortThis service handles distributed sensor check-ins. SensorServicesWorkerConnectionsThis setting specifies the number of concurrent incoming connections to sensor services at any one time. SensorServicesWorkerCountThis parameter sets the number of processes to handle sensor-related activities (registrations, checkins, etc). SensorThrottleTypeThis parameter sets throttling strategy. ServiceUnavailableRetryDelayThis parameter specifies the number of seconds to wait before retrying when the console returns a 503 (service unavailable) message from the datastore when the site throttle or maximum low priority request thresholds have been exceeded. StrictComputerSIDMatchingIf set to True, a sensor registering with an existing ID but mismatched SID is registered as a new sensor and gets a new sensor ID. If set to False, the SID is not checked and the sensor registers with existing ID. VDIAPIEnabledWhen set to True, you can define the VDI attribute-mapping configuration in the VMware Carbon Black EDR server console. Selectable attributes are Hostname, DNS Name, Computer SID, IP Address, and MAC Address. Computer SID is the default attribute.
