Agent Health Check
Agent 1.x series
The Threat Stack Agent uses a two-way connection to communicate with the Threat Stack backend. To check the connection health, run the cloudsight status command. The results indicate the health of Threat Stack’s processes and connection.
The cloudsight status command returns the following connection information:
Threat Stack Cloud Sight | RUNNING or STOPPED with Process ID |
Threat Stack Connection | CONNECTED, DISCONNECTED, or WAITING FOR READY* |
Threat Stack Audit Collection Service | RUNNING or STOPPED with Process ID |
Threat Stack File Integrity Monitoring | RUNNING or STOPPED with Process ID |
*If the Agent does not receive a READY response within 30 seconds, then it attempts to reconnect.
Additionally, as a host-based Agent feature, you can run the cloudsight setup -q command to return quiet output results.
Note
You cannot run the cloudsight status -q command in a 1.x container.
The command returns the following information:
Connections | 0 (running) or 1 (stopped) |
Processes | 0 (active) or 1 (disconnected) |
Agent 2.x+ series
The Threat Stack Agent uses a two-way connection to communicate with the Threat Stack backend. To check the connection health, run the tsagent status command. The results indicate the health of Threat Stack’s processes and connection.
The tsagent status command returns the following connection information:
Threat Stack Agent Daemon | CONNECTED, DISCONNECTED, or WAITING FOR READY* |
Threat Stack Backend Connection | CONNECTED, DISCONNECTED, or WAITING FOR READY* |
Threat Stack Login Collector | RUNNING or STOPPED with Process ID |
Threat Stack Audit Collection Service | RUNNING or STOPPED with Process ID |
Threat Stack Log Scan Service | CONNECTED, DISCONNECTED, or WAITING FOR READY* |
Threat Stack Host Info Collector | RUNNING or STOPPED with Process ID |
Threat Stack Vulnerability Scanner | RUNNING or STOPPED with Process ID |
Threat Stack Heartbeat Service | RUNNING or STOPPED with Process ID |
Threat Stack File Integrity Monitoring | RUNNING or STOPPED with Process ID |
*If the Agent does not receive a READY response within 30 seconds, then it attempts to reconnect.
Additionally, as a feature, you can run the tsagent status -q command to return quiet output results.
The command returns the following information:
Connections | 0 (running) or 1 (stopped) |
Processes | 0 (active) or 1 (disconnected) |