Skip to main content

Agents

To navigate to the Agents dossier in the Lacework Console, click Resources > Agents. See Dossier Navigation and Filters for information about filtering dossier data.

Agent monitor

This table displays information about agents installed on hosts.

ColumnDescription
HostnameThe hostname of the machine on which the agent is running.
NameThe EC2 instance name.
IP addressThe IP address of the host.
Agent statusThe agent status. Your agent status can be ACTIVE or INACTIVE.
Agent OSThe type of operating system (OS) on which the agent is installed. The OS type can be Windows or Linux.
Created timeThe time and date when the host was detected by Lacework.
Agent versionThe version of the agent installed on the host.

AWS Instances with no Lacework agent

This table displays information about the AWS EC2 instances on which agents are not installed. Consider installing agents on instances that are in running state.

ColumnDescription
Instance IDAWS EC2 instance ID.
TypeThe type of instance.
StateThe state of the instance.
NameThe name of the instance.
RegionThe region that the instance belongs to.
Image IDThe Amazon Machine Image (AMI).
VPC IDThe ID of the VPC in which the instance is running.
Account IDAWS account ID.
Account aliasAWS account ID alias.
Public IPThe public IP address of the instance.
Private IPThe private IP address of the instance.

IPs with no Lacework agent

This table displays information about hosts on which agents are not installed. Consider installing agents on these hosts.

ColumnDescription
Machine IPThe IP address of the host.
Number of bytesThe number of bytes of data transferred between the host and other entities.
Number of connectionsThe number of network connections between the host and other entities.

Azure instances with no Lacework agent

This table displays information about the Azure Virutal Machines (VMs) on which agents are not installed. Consider installing agents on instances that have a VM status of Running.

ColumnDescription
Instance IDAzure VM instance ID.
AKS creation sourceIf the Azure VM is part of an Azure Kubernetes Service (AKS) cluster, the node name is displayed here.
HostnameThe hostname of the VM.
VM statusThe power state of the VM.
LocationThe Azure region that the VM belongs to.
OfferThe Offer name of the image.
PublisherThe Publisher that created the image.
Subscription IDThe Azure subscription ID for the VM.
Subscription nameThe Azure subscription name for the VM.
Tenant IDThe Azure tenant ID for the VM.
Tenant nameThe Azure tenant name for the VM.
Resource groupThe Azure resource group for the VM.
SKUThe SKU of the image.
VM sizeThe size of the Azure VM.
OS typeThe operating system of the image deployed on the Azure VM.
URNThe Unique Resource Name for the Azure VM.

GCP instances with no Lacework agent

This table displays information about the GCP Virutal Machines (VMs) on which agents are not installed. Consider installing agents on instances that are in a RUNNING state.

ColumnDescription
Instance IDGCP VM instance ID.
HostnameThe hostname of the VM.
Project IDThe GCP Project ID for the VM.
Project nameThe GCP Project name for the VM.
Project numberThe GCP Project number for the VM.
RegionThe GCP Region for the VM.
VM instance typeThe GCP machine type for the VM.
StateThe state of the VM.
URNThe Unique Resource Name for the GCP VM.
Internal IPThe internal IP of the VM.
External IPThe external IP of the VM.

Instances with no Lacework agent or agentless scanning

This table displays information about AWS EC2 instances without an agent or agentless installed. Consider an agent install or an agentless integration to cover these hosts.

ColumnDescription
Instance IDAWS EC2 instance ID.
Account IDAWS account ID.
Account aliasAWS account ID alias.
TypeThe type of instance.
RegionThe region that the instance belongs to.
Image IDThe image ID.
VPC IDThe ID of the VPC in which the instance is running.
Public IPThe public IP address of the instance.
Private IPThe private IP address of the instance.
StateThe state of the instance. Your instance can be in one of the following states: pending, running, stopping, stopped, shutting-down, or terminated.
NameThe name of the instance.

Agent upgrades

This table displays information about the versions to which agents were last upgraded, and the time and date when the versions were first installed.