Agent Health Check

Follow

Using the Agent Health Check
The Threat Stack agent uses a two way connection to communicate with the Agent Listener back end. Threat Stack receives events from the agent and stores configuration data in files.

To check the connection health, run the ‘cloudsight status’ command. The results indicate the health of Threat Stack’s processes and connection.

Cloudsight Status command results:

#cloudsight status 
Threat Stack Cloud Sight RUNNING (Process ID: 8795)
Threat Stack Connection CONNECTED
Threat Stack Audit Collection Service RUNNING (Process ID: 8781)
 Threat Stack File Integrity Monitoring  RUNNING (Process ID: 8919)

 

If the Agent does not receive a ‘READY’ response within 30 seconds, it attempts to reconnect.

States:
Services RUNNING or STOPPED
Connection CONNECTED, DISCONNECTED or WAITING FOR READY 

Additionally, you can add the -q argument for a quiet output. This returns,

  • “0” for active connections or processes
  • “1” for disconnected or stopped connections and processes

Example: Threat Stack uses Sensu to check our agent heath.

check_cloudsight_status.png

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request

Comments

0 comments

Article is closed for comments.