Cortex XDR Linux Agnet version 8.7.0.131661

[Vinothkumar_SBA]

Hi Team,

We tried to install the XDR agent version 8.7.0.131661 on a Linux machine. The installation was successful, but the XDR services are all in a "stopped" status. We attempted to start all services using the command cytool runtime start all, but no error was found after entering this command. However, we still see that all services are in a stopped status. We also checked the Linux agent installation compatibility matrix, and everything seems fine. Can anyone explain why the agent shows a "stopped" status? Has anyone faced similar issues?

[neelrohit]

I am assuming you are observing this for the first time. But this is an expected behaviour of the linux agent. Other services(except pmd) will come up only after fetching the first content updates on the endpoint.

Try looking up after 10-15Mins

[Vinothkumar_SBA]

Hi Neelrohit,

Yes, I am facing this issue for the first time. We installed the XDR agent yesterday, but the same issue still persists now. So, we uninstalled the XDR 8.7.* agent version and reinstalled the 8.6.1.* agent version. This version is working fine, and all services are running smoothly. However, when we installed the 8.7.* agent version on another Linux machine, we encountered the same issue again.