This topic describes a Carbon Black EDR Linux sensor procman driver issue.
Cause
There is an issue loading a procmon driver, or there is a version mismatch from a failed upgrade.
Impact
The sensor cannot track the current event log.
Severity Scale
Condition |
Health score |
Message |
---|---|---|
Cannot determine current event log stats |
-50 |
Failed to get Event log stats |
Remediation
Restart CB daemon. Contact Carbon Black Technical Support if issues continue.