Initiate an Immediate macOS Sensor Check-in to the Carbon Black EDR Server

For troubleshooting purposes, you can initiate an immediate macOS sensor check-in to the Carbon Black EDR server.

You can run a command to dump and collect network event logs, cbdaemon log files, and important sensor and system configurations that can help diagnose sensor issues. The files are packaged up into a single compressed file that you can deliver to Carbon Black for analysis.

Procedure

• ♦ To dump communication and event tracking logs, open a terminal and issue the following command:

  sudo kill -s USR2 <pid of CbOsxSensorService>