![]() You can see the specific information for your device on the device's Details tab. You can see the timing of the last and next polling on the Planisphere Data Sources tab. Planisphere: If a device is communicating with the CrowdStrike Cloud, Planisphere will collect information about that device on its regular polling of the CrowdStrike service.You can verify that the host is connected to the cloud using Planisphere or a command line on the host. Verify the Host's Connection to the CrowdStrike Cloud DHCP Client, if you use Web Proxy Automatic Discovery (WPAD) via DHCPĪn installation log with more information should be located in the %LOCALAPPDATA%\Temp directory for the user attempting the install.LMHosts (may be disabled on your host if the TCP/IP NetBIOS Helper service is disabled).The sensor can install, but not run, if any of these services are disabled or stopped: Please see the installation log for details." ![]() If required services are not installed or running, you may see an error message in the sensor's logs: "A required Windows service is disabled, stopped, or missing. If the sensor doesn't run, confirm that the host meets our system requirements (listed in the full documentation, found at the link above), including required Windows services. Troubleshooting General Sensor Issues Sensor is Installed, but Doesn't Run If you do not see output similar to this, please see Troubleshooting General Sensor Issues, below. (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN) The following output will appear if the sensor is running: To validate that the Falcon sensor for Windows is running on a host, run this command at a command prompt: If you need a maintenance token to uninstall an operating sensor or to attempt upgrading a non-functional sensor, please contact your Security office for assistance. With Tamper Protection enabled, the CrowdStrike Falcon Sensor for Windows cannot be uninstalled or manually updated without providing a computer-specific "maintenance token". Duke's CrowdStrike Falcon Sensor for Windows policies have Tamper Protection enabled by default. Please see the installation log for details."Īn installation log with more information should be located in the %LOCALAPPDATA%\Temp directory for the user attempting the install.Īlso, confirm that CrowdStrike software is not already installed. If required services are not installed or running, you may see an error message: "A required Windows service is disabled, stopped, or missing. If the sensor installation fails, confirm that the host meets the system requirements (listed in the full documentation, found at the link above), including required Windows services. If you have questions or issues that this document doesn't address, please submit a ServiceNow case to "Device Engineering - OIT" or send an email to Troubleshooting Sensor Installation Installation fails Full Documentation and Further AssistanceĪ recent copy of the full CrowdStrike Falcon Sensor for Windows documentation (from which most of this information is taken) can be found at (Duke NetID required). Installing this software on a personally-owned will place the device under Duke policies and under Duke control. Please do NOT install this software on personally-owned devices. NOTE: This software is NOT intended for use on computers that are NOT owned by Duke University or Duke Health. Troubleshooting the CrowdStrike Falcon Sensor for Windows
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |