Skip to main content
Skip table of contents

Beats Grid

Only Global and Restricted Admins can use this feature.

You must initialize the Long-Running LRCTL service to work with Open Collectors and Beats in the Web Console. For instructions on how to initialize the service, see Configure Open Collector Connection to the SIEM.

The Beats grid allows users to view and manage Beats associated with registered LRCTL Open Collectors from the Web Console.

To access the Beats grid:

  1. On the top navigation bar, click the Administration icon, and then click Log Collection.
    The Log Sources page appears.

  2. On the left side, click Beats.

View Active and Retired Beats

By default, the grid displays active Beats. To view retired Beats, click the Show Retired check box in the upper-right corner of the page.

Grid Columns

Column Descriptions

The following columns are visible in the Beats grid. Clicking any column header sorts by that metric.



Display Name

The name of the Beat.

Open Collector

The Open Collector associated with the Beat.

System Monitor Agent

The System Monitor Agent performing the Beat collection.


The Entity assigned to the Beat.


Indicates whether the Beat is Active or Retired.

Filter the Grid

Each column can be filtered using the filter options below the column name. There are three filter types in the agents grid:

Filter Type



Type in the field to only display results in the column that contains the entered text.


Select one of the available options from the drop list to only display results that match the selection.

 To retire or activate multiple Beats at one time, you can select multiple Beats by clicking the check boxes the Check All column.

Inspector Window

When you click on a Beat row, the Inspector window slides open from the right side and displays additional details for the selected Beat.

JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.