Windows Agent 2.x Series Commands

The Threat Stack Agent for Microsoft Windows Server allows you to run a series of Command Prompt commands for informational and troubleshooting purposes.

Important

Ensure you open the Command Prompt Window as an administrator.

Command	Description
tsagent start	Start the Threat Stack Agent
tsagent stop	Stop the Threat Stack Agent
tsagent restart	Restart the Threat Stack Agent
tsagent status	Get the status of the Threat Stack Agent
tsagent config --list	Lists the configuration of the Threat Stack Agent
tsagent config --set loglevel [parameter]	Change the logging level of the Threat Stack Agent. The available parameters are: debug error fatal info trace warn
tsagent config --get [parameter]	Retrieves the value of the configuration settings. Some of the available parameters are: AgentID - It indicates the GUID generated while registering the Agent with the platform. AgentKey - It indicates the GUID generated while registering the Agent with the platform. ConfigPath - It indicates the location of the config directory. By default, it is “C:\ProgramData\Threat Stack\config\”. DeployKey - It indicates the key used to deploy the Agent. HostName - It indicates the Agent’s hostname. InstallLocation - It indicates the location of the install directory. LogLevel - It indicates the Agent’s log level. RulesetNames - It indicates the rule sets specified during the installation process. The default rule set is “Windows Rule Set”. StartServicesOnInstall - It indicates whether the Agent was set to start after the installation. It will return Yes or No. Url - It indicates the platform url. By default, it is https://app.threatstack.com.