Axon Agent Profiles

Only Administrators can take these actions.

Create an Axon Agent Profile

Create an Agent Profile and specify what collections you want the Agent to perform. Upon creating the Agent Profile, you can download and install it on multiple devices to create Axon Agent collectors. 

Add a new Agent Profile by doing the following:

1. Open the Settings menu by clicking the gear icon at the bottom-left of the main screen.
2. Click Agents under the Integrations header.
   The Agents window appears.
3. Click Add Agent Profile in the top-right of the window.
   The Add Agent Profile pop-up appears.

4. Enter the following information on the Basic Info screen:

   Field	Description
   Operating System	Select the operating system onto which Agents using this Agent Profile will be installed.
   Agent Profile Name	Enter a unique name for this Agent Profile.
   Agent Description	(Optional.) Enter a description to identify this Agent Profile.
   Version Preferences	Open the drop-list and select the fixed version.

5. Click Next.

6. Click the toggle next to each option to enable collection of that type for this Agent Profile.

   

   For more detailed steps on configuring each type of agent profile, refer to Axon Agent Collectors.

   Toggle	Description
   Syslog Collection	Agents using this profile can collect incoming syslog data. Once the toggle is enabled, enter the port to use for syslog collection.
   Flat File Collection	Agents using this profile can collect logs from compressed flat files. Once the toggle is enabled, enter the file path(s) of the flat file(s) from which logs will be collected. Additionally, excluded file paths can also be added. To collect from all files in a directory, add an asterisk (*) to the end of the file path, e.g. /var/log/* Additional file paths and excluded file paths can be added by clicking Add Another File Path or Add Another Excluded File Path, respectively.
   Windows Event Log Collection	Agents using this profile can collect Windows Event Logs from local channels on the host machine. This includes Forwarded Logs channel, if properly configured. Certain channels available, such as "Windows Powershell," will only work if your Windows OS version supports these channels.  Check the Windows OS compatibility guide for more information. Once this toggle is enabled, open the drop-list and select each log source type to be collected by the Agent. This option is only available if Windows was chosen as the operating system in step 4.

7. Click Submit.
   The Agent Profile is created.

   

   On the confirmation screen, you are given the option to download the Agent Profile Package, which allows for Agents using the created Agent Profile to be installed on an endpoint. See Download and Install Axon Agents for more information on downloading this package.

Edit an Axon Agent Profile

Agent Profiles can be edited as necessary. To edit an Agent Profile, from the Agents window:

1. Click the Agent Profiles tab.
2. Click the three-dot menu to the left of the Agent Profile you wish to edit.
3. Click Edit Profile.
   The Edit Agent Profile pop-up appears.
4. Make the desired changes to the Agent Profile, and click Save.
   The Agent Profile is updated successfully.

Delete an Axon Agent Profile

Agent Profiles can be deleted if they are no longer in use. Agent Profiles cannot be deleted if there are any active Agents associated with the Agent Profile.

To delete an Agent Profile, from the Agents window:

1. Click the Agent Profiles tab.
2. Click the three-dot menu to the left of the Agent Profile you wish to delete.
3. Click Delete Profile.
   A confirmation pop-up appears.
4. Click Yes, Delete.
   The Agent Profile is deleted successfully.