User sees one of the following health messages for the VMware Carbon Black EDR sensor installed on an endpoint running Linux:
Event Collector Not Installed
Event Source Not Connected
VMware Carbon Black EDR
VMware Carbon Black EDR sensor (Linux)
Check to see if the sensor version that is installed is compatible with the Linux distribution and kernel version that is running on the endpoint.
If the sensor is compatible, then check to see if the kernel header packages have been downloaded and installed for the affected endpoint.
rpm -qa | grep kernel | grep devel
dpkg -l | grep headers
Use the following commands to install the header files:
yum install kernel-devel
yum install kernel-headers
sudo apt install linux-headers-$(uname -r)
Restart the sensor service:
systemctl restart cbdaemon.service