Beats Grid
Only Global and Restricted Admins can use this feature.
You must initialize the Long-Running LRCTL service to work with Open Collectors and Beats in the Web Console. For instructions on how to initialize the service, see Configure Open Collector Connection to the SIEM.
The Beats grid allows users to view and manage Beats associated with registered LRCTL Open Collectors from the Web Console.
To access the Beats grid:
On the top navigation bar, click the Administration icon, and then click Log Collection.
The Log Sources page appears.On the left side, click Beats.
View Active and Retired Beats
By default, the grid displays active Beats. To view retired Beats, click the Show Retired check box in the upper-right corner of the page.
Grid Columns
Column Descriptions
The following columns are visible in the Beats grid. Clicking any column header sorts by that metric.
Column | Description |
|---|---|
Display Name | The name of the Beat. |
Open Collector | The Open Collector associated with the Beat. |
System Monitor Agent | The System Monitor Agent performing the Beat collection. |
Entity | The Entity assigned to the Beat. |
Status | Indicates whether the Beat is Active or Retired. |
Filter the Grid
Each column can be filtered using the filter options below the column name. There are three filter types in the agents grid:
Filter Type | Description |
|---|---|
Text | Type in the field to only display results in the column that contains the entered text. |
Drop-list | Select one of the available options from the drop list to only display results that match the selection. |
To retire or activate multiple Beats at one time, you can select multiple Beats by clicking the check boxes the Check All column.
Inspector Window
When you click on a Beat row, the Inspector window slides open from the right side and displays additional details for the selected Beat.