![]() ![]() a sensor update package with a release build number, such as /opt/CrowdStrike/falcon-sensor3000.the original sensor installation at /opt/CrowdStrike/falcon-sensor.$ sudo ls -al /opt/CrowdStrike /opt/CrowdStrike/falcon-sensor If the sensor is not running, verify that the sensor's application files exist on your host: The sensor requires these runtime services: -systags for system tags currently applied to a running sensor.-provisioning-token for Provisioning Token.-billing to configure the sensor billing type.-message-log for logging messages to disk. ![]() -version for version of sensor currently running.-metadata-query to determine the configured sensor cloud provider metadata query flags.-feature to determine the configured sensor feature flags.-trace for determining the configured trace level.-rfm-reason to determine reason for sensor running in Reduced Functionality Mode.-rfm-state for indicating whether the sensor is in Reduced Functionality Mode.Sudo /opt/CrowdStrike/falconctl -g GET_OPTIONS Check the Falcon sensor's configurable options:.Check kernel modules to verify the Falcon sensor's kernel modules are running:.Check running processes to verify the Falcon sensor is running:.Sudo /opt/CrowdStrike/falconctl -g -rfm-stateįor more info about RFM status, see "Appendix: Reduced Functionality Mode (RFM)" below. Troubleshooting general sensor issues Verify kernel compatibilityįor hosts with the sensor already installed, verify kernel compatibility by checking RFM status. ![]() Solution: Install a supported version of OpenSSL. Issue: Your installation fails with an error message about missing dependencies of libssl, libc, or libcrypto. Verifying that dependencies are Installed $ sudo zypper mr -enable SLE11-Security-Module Solution: Enable the SLES 11 security module: This is most commonly caused by a SLES version that doesn't include a modern OpenSSL implementation. Issue: Your SLES installation fails with an error that nothing provides openssl1 >= 1.0.1. $ apt-get -f install SLES installation fails: "Nothing Provides Openssl" Solution: Use this command to install the dependent packages: Issue: Your Ubuntu installation fails with an error that "dependent packages are not installed." Ubuntu installation fails: "Dependent Packages are not Installed" Solution: Verify that the SHA-256 checksum of the installer file you downloaded matches the SHA-256 checksum available from. If you have questions or issues that this document doesn't address, please submit a ServiceNow case to "Device Engineering - OIT" or send an email to Troubleshooting Sensor Installation Installation fails Full Documentation and Further AssistanceĪ recent copy of the full CrowdStrike Falcon Sensor for Linux documentation (from which most of this information is taken) can be found at (Duke NetID required). Installing this software on a personally-owned will place the device under Duke policies and under Duke control. Please do NOT install this software on personally-owned devices. NOTE: This software is NOT intended for use on computers that are NOT owned by Duke University or Duke Health. Troubleshooting the CrowdStrike Falcon Sensor for Linux ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |