Viewing and editing agent groups

The table under Components → Agents displays the created and deployed agent groups. The following information is provided for each of these groups:

• Agent group name
• Number of connected agents in the group The solution displays the number of agents with the Connected status and the total number of agents in the group.
• Namespace of the agent group.
• Orchestrator managing the agent group.
• Enabled node monitoring activities The solution displays the monitoring actions enabled in the agent group as follows:
  • Container processes.
  • Network connections. The solution additionally indicates the enabled network reputation monitoring actions using the reputation protection icon () and port opening monitoring actions using port opening icon ().
  • File threat protection. The solution additionally indicates enabled container protection using the container icon () and node protection using the node icon ().
  • File operations.
  • Container lifecycle.
  • Host login.

  If monitoring actions are not enabled in the agent group, the solution displays Disabled.

• Linked SIEM

You can filter agent groups by connection status (All, Connected, Disconnected, Pending) using the buttons above the table.

By clicking on the deployment icon (), you can expand each agent group in the table to view the following agent details:

• The name of the agent and its connection status.
• Version of the node where the agent is deployed (primary or worker)
• The name of the pod with which the agent is associated.
• Node monitoring action statuses (Container processes, Network connections, File Threat Protection, Container lifecycle, and File operations).
• SIEM status
• Date and time when the agent last connected

By clicking the agent name link, you can expand the sidebar to view agent status information.

To edit the agent group settings:

1. Under Components → Agents, in the table with the list of agent groups, click the link in the agent group name.
2. In the window that opens, edit the group settings.

   You can only add scopes when creating an agent group. You can change scopes added to agent groups in the Administration → Access management → Scopes section.

3. Click Save.

Page top