Agents
To navigate to the Agents dossier in the Lacework Console, click Resources > Agents. See Dossier Navigation and Filters for information about filtering dossier data.
Agent monitor
This table displays information about agents installed on hosts.
| Column | Description |
|---|---|
| Hostname | The hostname of the machine on which the agent is running. |
| Name | The EC2 instance name. |
| IP address | The IP address of the host. |
| Agent status | The agent status. Your agent status can be ACTIVE or INACTIVE. |
| Agent OS | The type of operating system (OS) on which the agent is installed. The OS type can be Windows or Linux. |
| Created time | The time and date when the host was detected by Lacework. |
| Agent version | The version of the agent installed on the host. |
AWS Instances with no Lacework agent
This table displays information about the AWS EC2 instances on which agents are not installed. Consider installing agents on instances that are in running state.
| Column | Description |
|---|---|
| Instance ID | AWS EC2 instance ID. |
| Type | The type of instance. |
| State | The state of the instance. |
| Name | The name of the instance. |
| Region | The region that the instance belongs to. |
| Image ID | The Amazon Machine Image (AMI). |
| VPC ID | The ID of the VPC in which the instance is running. |
| Account ID | AWS account ID. |
| Account alias | AWS account ID alias. |
| Public IP | The public IP address of the instance. |
| Private IP | The private IP address of the instance. |
IPs with no Lacework agent
This table displays information about hosts on which agents are not installed. Consider installing agents on these hosts.
| Column | Description |
|---|---|
| Machine IP | The IP address of the host. |
| Number of bytes | The number of bytes of data transferred between the host and other entities. |
| Number of connections | The number of network connections between the host and other entities. |
Azure instances with no Lacework agent
This table displays information about the Azure Virutal Machines (VMs) on which agents are not installed. Consider installing agents on instances that have a VM status of Running.
| Column | Description |
|---|---|
| Instance ID | Azure VM instance ID. |
| AKS creation source | If the Azure VM is part of an Azure Kubernetes Service (AKS) cluster, the node name is displayed here. |
| Hostname | The hostname of the VM. |
| VM status | The power state of the VM. |
| Location | The Azure region that the VM belongs to. |
| Offer | The Offer name of the image. |
| Publisher | The Publisher that created the image. |
| Subscription ID | The Azure subscription ID for the VM. |
| Subscription name | The Azure subscription name for the VM. |
| Tenant ID | The Azure tenant ID for the VM. |
| Tenant name | The Azure tenant name for the VM. |
| Resource group | The Azure resource group for the VM. |
| SKU | The SKU of the image. |
| VM size | The size of the Azure VM. |
| OS type | The operating system of the image deployed on the Azure VM. |
| URN | The Unique Resource Name for the Azure VM. |
GCP instances with no Lacework agent
This table displays information about the GCP Virutal Machines (VMs) on which agents are not installed. Consider installing agents on instances that are in a RUNNING state.
| Column | Description |
|---|---|
| Instance ID | GCP VM instance ID. |
| Hostname | The hostname of the VM. |
| Project ID | The GCP Project ID for the VM. |
| Project name | The GCP Project name for the VM. |
| Project number | The GCP Project number for the VM. |
| Region | The GCP Region for the VM. |
| VM instance type | The GCP machine type for the VM. |
| State | The state of the VM. |
| URN | The Unique Resource Name for the GCP VM. |
| Internal IP | The internal IP of the VM. |
| External IP | The external IP of the VM. |
Instances with no Lacework agent or agentless scanning
This table displays information about AWS EC2 instances without an agent or agentless installed. Consider an agent install or an agentless integration to cover these hosts.
| Column | Description |
|---|---|
| Instance ID | AWS EC2 instance ID. |
| Account ID | AWS account ID. |
| Account alias | AWS account ID alias. |
| Type | The type of instance. |
| Region | The region that the instance belongs to. |
| Image ID | The image ID. |
| VPC ID | The ID of the VPC in which the instance is running. |
| Public IP | The public IP address of the instance. |
| Private IP | The private IP address of the instance. |
| State | The state of the instance. Your instance can be in one of the following states: pending, running, stopping, stopped, shutting-down, or terminated. |
| Name | The name of the instance. |
Agent upgrades
This table displays information about the versions to which agents were last upgraded, and the time and date when the versions were first installed.