Agent Health Check

Agent 1.x series

The Threat Stack Agent uses a two-way connection to communicate with the Threat Stack backend. To check the connection health, run the cloudsight status command. The results indicate the health of Threat Stack’s processes and connection.

The cloudsight status command returns the following connection information:

Threat Stack Cloud Sight	RUNNING or STOPPED with Process ID
Threat Stack Connection	CONNECTED, DISCONNECTED, or WAITING FOR READY*
Threat Stack Audit Collection Service	RUNNING or STOPPED with Process ID
Threat Stack File Integrity Monitoring	RUNNING or STOPPED with Process ID

*If the Agent does not receive a READY response within 30 seconds, then it attempts to reconnect.

Additionally, as a host-based Agent feature, you can run the cloudsight setup -q command to return quiet output results.

Note

You cannot run the cloudsight status -q command in a 1.x container.

The command returns the following information:

Connections	0 (running) or 1 (stopped)
Processes	0 (active) or 1 (disconnected)

Agent 2.x+ series

The Threat Stack Agent uses a two-way connection to communicate with the Threat Stack backend. To check the connection health, run the tsagent status command. The results indicate the health of Threat Stack’s processes and connection.

The tsagent status command returns the following connection information:

Threat Stack Agent Daemon	CONNECTED, DISCONNECTED, or WAITING FOR READY*
Threat Stack Backend Connection	CONNECTED, DISCONNECTED, or WAITING FOR READY*
Threat Stack Login Collector	RUNNING or STOPPED with Process ID
Threat Stack Audit Collection Service	RUNNING or STOPPED with Process ID
Threat Stack Log Scan Service	CONNECTED, DISCONNECTED, or WAITING FOR READY*
Threat Stack Host Info Collector	RUNNING or STOPPED with Process ID
Threat Stack Vulnerability Scanner	RUNNING or STOPPED with Process ID
Threat Stack Heartbeat Service	RUNNING or STOPPED with Process ID
Threat Stack File Integrity Monitoring	RUNNING or STOPPED with Process ID

*If the Agent does not receive a READY response within 30 seconds, then it attempts to reconnect.

Additionally, as a feature, you can run the tsagent status -q command to return quiet output results.

The command returns the following information:

Connections	0 (running) or 1 (stopped)
Processes	0 (active) or 1 (disconnected)