Agent Health Check

Using the Agent Health Check
The Threat Stack agent uses a two way connection to communicate with the Agent Listener back end. Threat Stack receives events from the agent and stores configuration data in files.

To check the connection health, run the ‘cloudsight status’ command. The results indicate the health of Threat Stack’s processes and connection.

Cloudsight Status command results:

#cloudsight status
Threat Stack Cloud Sight	RUNNING (Process ID: 8795)
Threat Stack Connection	CONNECTED
Threat Stack Audit Collection Service	RUNNING (Process ID: 8781)
Threat Stack File Integrity Monitoring	RUNNING (Process ID: 8919)

If the Agent does not receive a ‘READY’ response within 30 seconds, it attempts to reconnect.

States:
Services	RUNNING or STOPPED
Connection	CONNECTED, DISCONNECTED or WAITING FOR READY

Additionally, you can add the -q argument for a quiet output. This returns,

• “0” for active connections or processes
• “1” for disconnected or stopped connections and processes

Example: Threat Stack uses Sensu to check our agent heath.