Skip to main content

Applications

To navigate to the Applications dossier in the Lacework Console, click Resources > Host > Applications. For information about filtering dossier data, see Dossier Navigation and Filters.

Dashboard​

These graphs aggregate data for all running applications where Lacework agents are installed. Available graphs present CPU usage, memory usage, network-related information such as connections and bytes.

Alerts for all running applications where Lacework agents are installed.

Polygraphs​

See Applications Polygraph.

List of applications​

This table displays observed applications across all machines.

Active listening ports​

This table displays any open ports on the host. Note that the displayed ports are open locally and any blocks by firewalls or iptables are not reflected.

Executable versions​

This table displays detailed application information when it can be determined.

Command line by executable​

This table displays the command line that was used to launch the process. This information can be useful for getting more insight into any arguments passed to the process at launch time.

Applications information​

This table displays the username and hostname for all observed applications.

List of active containers and Container image information​

These tables display active containers and container image information and any vulnerabilities found in them. Container information includes the container type, the host where it is located, associated tags, hash, etc. Image information includes size, number of such containers, creation time, etc.

To view additional details about the compliance status for a container or image, hover over a row until View Report displays and click View Report. Click an entry link in any table to open a new view with details about that entry. For example, click a hostname to display additional information about that machine.

If your environment does not have any running containers, these tables do not display any data.

A Kubernetes Pod is the smallest deployed unit in the Kubernetes object model. A Pod represents a single instance of an application in Kubernetes, which might consist of either a single container or a small number of containers that are tightly coupled and share resources.