Troubleshooting

General Troubleshooting

For troubleshooting issues with Falcon Cloud Security, submit a ticket on the CrowdStrike support portal.

For troubleshooting common ABI issues, refer to the ABI Reference Guide and Troubleshooting CloudFormation.

Accounts appear in Falcon Cloud Accounts Registration but are still Inactive

  1. Verify the following stacksets completed in each account with no errors
    • CrowdStrike-Cloud-Security-Stackset
    • CrowdStrike-Cloud-Security-Root-EB-Stackset
    • CrowdStrike-Cloud-Security-EB-Stackset
  2. For each stackset, review the stack instances for errors.

Redeployment Errors

  1. After deleting the stack and recreating, the stack fails with S3Bucket or LogGroup already exists.
    • Delete the failed stack and please follow the steps in Cleanup Instructions.
    • Retry creating stack.

SSM Distributor

  1. Check the execution logs for the SSM State Manager Association. See SSM Documentation.

EKS Protection

  1. Check the Lambda logs in CloudWatch Logs for crowdstrike-abi-eks-init-function and crowdstrike-abi-eks-events-function.
  2. Check the CodeBuild Execution logs for crowdstrike-eks-codebuild.
  3. Check the Falcon Operator logs on the cluster. See Operator Troubleshooting.

ECR Registry Connections

See falcon documentation for detailed troubleshooting information here.

Next: Choose Feedback.