You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: defender-endpoint/linux-support-ebpf.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -166,11 +166,11 @@ uname -a
166
166
167
167
If you see increased resource consumption by Microsoft Defender on your endpoints, it's important to identify the process/mount-point/files that are causing most of the CPU/Memory utilization. You can then apply the necessary exclusions. After applying possible antivirus exclusions, if `wdavdaemon` (parent process) is still consuming the resources, use the ebpf-statistics command to get the top system call count:
Copy file name to clipboardExpand all lines: defender-endpoint/linux-support-install.md
+10-8Lines changed: 10 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -34,15 +34,15 @@ ms.date: 10/11/2024
34
34
An error in installation might or might not result in a meaningful error message by the package manager. To verify if the installation succeeded, obtain and check the installation logs using:
Active: active (running) since Thu 2020-03-26 10:37:30 IST; 23h ago
@@ -138,7 +138,8 @@ service mdatp status
138
138
where `<systemd_path>` is `/lib/systemd/system`for Ubuntu and Debian distributions and /usr/lib/systemd/system`for Rhel, CentOS, Oracle, and SLES. Then rerun step 2.
139
139
140
140
4. If the above steps don't work, check if SELinux is installed and in enforcing mode. If so, try setting it to permissive (preferably) or disabled mode. It can be done by setting the parameter `SELINUX` to `permissive` or `disabled` in `/etc/selinux/config` file, followed by reboot. Check the man-page of selinux for more details.
141
-
Now try restarting the mdatp service using step 2. Revert the configuration change immediately though for security reasons after trying it and reboot.
141
+
142
+
Now try restarting the mdatp service using step 2. Revert the configuration change immediately though for security reasons after trying it and reboot.
142
143
143
144
5. If `/opt` directory is a symbolic link, create a bind mount for `/opt/microsoft`.
144
145
@@ -148,7 +149,7 @@ Now try restarting the mdatp service using step 2. Revert the configuration chan
148
149
ls -l /opt/microsoft/mdatp/sbin/wdavdaemon
149
150
```
150
151
151
-
```Output
152
+
```console
152
153
-rwxr-xr-x 2 root root 15502160 Mar 3 04:47 /opt/microsoft/mdatp/sbin/wdavdaemon
153
154
```
154
155
@@ -188,9 +189,10 @@ Now try restarting the mdatp service using step 2. Revert the configuration chan
188
189
sudo mdatp diagnostic create
189
190
```
190
191
191
-
```Output
192
+
```console
192
193
Diagnostic file created: <path to file>
193
194
```
194
195
195
196
Path to a zip file that contains the logs are displayed as an output. Reach out to our customer support with these logs.
197
+
196
198
[!INCLUDE [Microsoft Defender for Endpoint Tech Community](../includes/defender-mde-techcommunity.md)]
0 commit comments