Using the Agent Health Check
The Threat Stack agent uses a two way connection to communicate with the Agent Listener back end. Threat Stack receives events from the agent and stores configuration data in files.
To check the connection health, run the ‘cloudsight status’ command. The results indicate the health of Threat Stack’s processes and connection.
Cloudsight Status command results:
|Threat Stack Cloud Sight||RUNNING (Process ID: 8795)|
|Threat Stack Connection||CONNECTED|
|Threat Stack Audit Collection Service||RUNNING (Process ID: 8781)|
|Threat Stack File Integrity Monitoring||RUNNING (Process ID: 8919)|
If the Agent does not receive a ‘READY’ response within 30 seconds, it attempts to reconnect.
|Services||RUNNING or STOPPED|
|Connection||CONNECTED, DISCONNECTED or WAITING FOR READY|
Additionally, you can add the -q argument for a quiet output. This returns,
- “0” for active connections or processes
- “1” for disconnected or stopped connections and processes
Example: Threat Stack uses Sensu to check our agent heath.