Cortex XDR Agent Service Get Stopped.

[Venkatesh_Konar]

Hello Guys!

Just wanted a clarification that once the Cortex XDR agent service : cyserver.exe get stopped due to any reason.

1.How the system service restarts again ?

2. How many or frequency of  heartbeats does cortex xdr agent send to Cortex XDR (Cloud) to restart the cortex XDR agent Service ?

3. From Documentation , it is mentioned "The Cortex XDR agent initiates communication with Cortex XDR every five minutes by sending a heartbeat to the server."

Does the above statement applies when the service of cortex xdr is stopped and trying to restart again?

4. If the Service of cortex xdr agent doesn;t get restart automatically ? Do we need to manually restart the cyserver.exe?

[aspatil]

Hello @Venkatesh_Konar ,

Thank you for writing to Live Community.

Stopping of Cyserver.exe has a large use case and most of them need to be get support intervention to resolve the issue.

1.To restart the service again you have to use Cytool runtime start Cyserver or restart the endpoint.

2. Assuming that the XDR agent is connected to XDR Server, then yes! he Cortex XDR agent initiates communication with Cortex XDR every five minutes by sending a heartbeat to the server."

3. No! 

4. Refer to point 1.

If you feel this has answered your query, please let us know by clicking on "mark this as a Solution".