Frequently Asked Questions

Agent

• Troubleshoot: Upgrade to Agent 1.8.0 on a Debian 9 OS
• Configure Agent Network Access
• FAQ: Why was threatstack.service terminated by systemd?
• FAQ: Why isn’t the containerized Agent monitoring audit events on my Azure Kubernetes clusters that have Ubuntu 18 nodes?
• FAQ: Why didn’t the Agent restart on my RedHat (RHEL) 8 or Amazon Linux 2 distribution?
• FAQ: What happens if my Linux Agent version 2.3.0 goes down?

See all 24 articles

AWS EC2 Tags

• FAQ: Do I have to use AWS EC2 tags?
• FAQ: Why don’t AWS EC2 tags show up for Configuration Audit?
• FAQ: Why don’t AWS EC2 tags show up for CloudTrail?
• FAQ: How long does it take for new / edited / deleted AWS EC2 tags to show up?
• FAQ: How does Threat Stack apply AWS EC2 tags?
• FAQ: How are AWS EC2 tags ingested by Threat Stack?

CloudTrail Alerting

• Why Is a Username Displaying as "Hidden Due to Security Reasons"?
• CloudTrail FAQ & Troubleshooting Guide

Configuration Auditing

• Configuration Audit Error "No S3 bucket for trail"
• Agent Configuration Arguments
• Configuration Auditing Troubleshooting

Container Monitoring

• FAQ: Why would I search using TTY?
• FAQ: How do I secure my AWS EKS workload with Threat Stack?
• FAQ: How do I secure my AWS ECS workload with Threat Stack?
• Docker FAQ & Troubleshooting Guide

Events and Alerts

• How do I Suppress an Alert?
• FAQ: Threat Stack displays no suppression results on Alerts page
• Troubleshoot Missing Events
• Supported Keys and Operators

File Integrity Monitoring

• Why do I not See FIM alerts on Old CentOS Operating Systems ?
• FAQ: Exceptions for FIM Create, Delete, and Move Events
• File Integrity Monitoring Troubleshooting Suggestions
• FAQ about File Transfer Protocol & FIM

Organization Settings

• Threat Stack Cloud Security Platform (CSP) Data Collection
• FAQ: Difference Between Organization Owners and Users
• Deploy Key Overview
• SSO FAQ & Troubleshooting Guide
• Threat Stack Data Collection

Rules

• FAQ: Rate Limits on Rules
• Update SSHD Configuration to Capture publickey Authentication
• Rule Aggregation

Vulnerability Assessment

• FAQ: What Vulnerabilities support is offered for Amazon Linux 1 and 2?
• Vulnerability Assessment FAQ