Only Global and Restricted Admins can use this feature.
The Agents grid in the Web Console displays all active and retired Agents. Upon activating or retiring any Agents in the Client Console, they are displayed in the Web Console's Agents grid.
To access the Agents grid:
On the top navigation bar, click the Administration icon, and then click Log Collection.
The Log Sources page appears.
On the left side, click Agents.
View Active and Retired Agents
By default, the grid displays active Agents. To view retired Agents, click the Show Retired Agents check box in the upper-right corner of the page.
By default, the grid displays 100 Agents. To load more Agents into the grid, scroll to the bottom. The list expands to add another 100 Agents. Repeat this process as needed until all Agents are shown.
The following columns are visible in the Agents grid. Clicking any column header sorts by that metric.
The name of the Agent.
The default Host record to which log messages collected by the Agent should be assigned.
The Entity assigned to the Agent.
Indicates whether the Agent is a Windows Agent or a Linux Agent.
Displays a count of active Log Sources associated with the Agent.
The SIEM version associated with the Agent.
Indicates whether the Agent is Active or Retired.
The highest-priority data processor to which the Agent forwards logs, as configured in Modify System Monitor Basic Properties.
Indicates the date and time of the most recent heartbeat received for the Agent.
A yellow background highlights Agents in a Warning status, and a red background highlights those in Error status, as configured in System Monitor Basic Properties.
An Agent progresses to Warning status once one heartbeat interval is missed and will progress to Error status after a second complete heartbeat interval has been missed.
Filter the Grid
Each column can be filtered using the filter options below the column name. There are three filter types in the Agents grid:
Type in the field to only display results in the column that contain the entered text.
Select one of the available options from the drop-list to only display results that match the selection.
Use the date picker to display the last heartbeat that was received on or after the date chosen.