Agent Identification and Acceptance

Unidentified Agents are saved in a separate “acceptance” table pending a direct action on the part of the user. This can be seen on the System Monitors tab in the New System Monitor Agents grid. Accepted System Monitor Agents appear in the grid below the New System Monitor Agents grid.

Column

Description

Action

Batch actions operate on all checked rows.

Status

Pending: The System Monitor Agent is waiting to be accepted before it will start delivering logs.

Rejected: The System Monitor Agent is not allowed to connect to the system.

Typically, new entries have a status of pending. If the administrator rejects them, the status is rejected. Because System Monitor Agents repeatedly try to connect, the entry should remain in Rejected state until the agent is uninstalled. Then, the entry can be deleted.


Host Name

Displays the computer name of the host the agent is running on.

Host OS

Displays the operating system for the computer the agent is running on.

Host OS Version

Displays the version of the OS the agent is running on.

Host IP Address

Displays the IP address of the computer the agent is running on.

Resolved Known Host

If the mediator can find a matching host in the database, the host appears here. Otherwise this field displays “Entity name:Host name:New”. The user can also resolve the host manually on the properties form.

Agent Name

Displays the system generated name of the Agent. By default, this is the same as the computer name. The user can change this in the properties form. The batch accept process prepends the host entity name if necessary to make the agent name unique.

Agent Type

Identifies the type of agent installed on the computer. This field has the same values as Agent Type on the System Monitors tab.

Agent Version

The LogRhythm assigned version of the System Monitor Agent.

Agent GUID

The globally unique identifier generated by the agent.