topic Re: Cortex Xdr Partial protected (7.4) in Cortex XDR Discussions

Cortex Xdr Partial protected (7.4)

chaim_Avisrur — Tue, 18 Jan 2022 13:32:39 GMT

Hi everyone ,

we have a problem with some of our linux servers ,
the status is partial Protected ,

the only thing that i find is the ited proccess stopped ,

is that can cause the isse?
also cant start the Ited by cmd , while try to start get an error "Incorrect parameter for runtime subcommand"

Any idea will be appreciated

bbarmanroy — Wed, 19 Jan 2022 03:34:53 GMT

Hi @chaim_Avisrur Please try the following steps in sequence:

Step 1

You can stop XDR agent and start it with the following commands:

1. cytool runtime stop

2. cytool runtime start

If it fails, try step 2.

Step 2

Check if the problem persists after a reboot

If this fails, try step 3.

Step 3

Create a support ticket and upload the support logs. You can collect support logs by referring to the documentation here.

jcandelaria — Wed, 19 Jan 2022 06:26:00 GMT

Just to verify as well, any of the criteria on this guide are met? even after the runtime stop/start command provided by @bbarmanroy