topic Re: Cortex XDR Linux Agnet version 8.7.0.131661 in Cortex XDR Discussions

Cortex XDR Linux Agnet version 8.7.0.131661

Vinothkumar_SBA — Wed, 16 Apr 2025 09:52:24 GMT

Hi Team,

We tried to install the XDR agent version 8.7.0.131661 on a Linux machine. The installation was successful, but the XDR services are all in a "stopped" status. We attempted to start all services using the command cytool runtime start all, but no error was found after entering this command. However, we still see that all services are in a stopped status. We also checked the Linux agent installation compatibility matrix, and everything seems fine. Can anyone explain why the agent shows a "stopped" status? Has anyone faced similar issues?

Re: Cortex XDR Linux Agnet version 8.7.0.131661

neelrohit — Wed, 16 Apr 2025 10:07:17 GMT

I am assuming you are observing this for the first time. But this is an expected behaviour of the linux agent. Other services(except pmd) will come up only after fetching the first content updates on the endpoint.

Try looking up after 10-15Mins

Re: Cortex XDR Linux Agnet version 8.7.0.131661

Vinothkumar_SBA — Wed, 16 Apr 2025 10:48:20 GMT

Hi Neelrohit,

Yes, I am facing this issue for the first time. We installed the XDR agent yesterday, but the same issue still persists now. So, we uninstalled the XDR 8.7.* agent version and reinstalled the 8.6.1.* agent version. This version is working fine, and all services are running smoothly. However, when we installed the 8.7.* agent version on another Linux machine, we encountered the same issue again.