Agents

title: Agents

Agents

The Agents module manages endpoints (servers, workstations, sensors) that have the agent installed.

Purpose

• Track connection status and basic device information.
• Manage tags for classification and quick event filtering.

Key features

• Status values: Active, Disconnected, Pending, Never Connected.
• Details view: OS, IP, Agent ID, Office, Last seen.
• Agents Status History timeline.
• Quick actions: View, Edit, Delete, View Events.

Search and filters

• Search by name, IP, hostname, or alias.
• Select Office to view agents for a specific site.
• Status to filter by agent state.
• Select Time to view agent activity within a time range.

Tagging

• Assign tags (for example: critical, db-server, linux) to support filtering and policies.
• Tags can be used in SIEM filters to narrow event scope.

Basic operations

• Check agent logs when an agent reports Disconnected.
• Use View Events to quickly inspect alerts related to that agent.