How to manually select EDR agents list from KATA [KATA/KEDRE]
Entry posted by svc_kms in How-to
6 views
You may want to obtain list of EDR agents ever connected to KATA.
Step-by-step guide
KATA 3.7+
-
Connect to Central Node via ssh, choose Technical support mode, become root:
$sudo-i -
Execute command:
sudo -u postgres psql antiapt -c "select * from agent_status;"
KATA 4.0/4.1/5.0/5.1
psql -U kluser -h 127.0.0.1 antiapt -c "select * from agent_status;"
|
All agents with only hostname, ip, last_packet_time columns can be exported this:
psql -U kluser -h 127.0.0.1 antiapt -c "select hostname,ip,last_packet_time from agent_status;" > /tmp/agents
|
Export all agents from SCNs connected to PCN execute
psql -U kluser -h 127.0.0.1 primarydb -c "select hostname,ip,last_packet_time from agent_status;" > /tmp/agents
|
Then open Excel and make import from Data -> From Text/CSV from /tmp/agents (download it to local computer first).
The resulting output will be the list of agents.
0 Comments
Recommended Comments
There are no comments to display.
Please sign in to comment
You will be able to leave a comment after signing in
Sign In Now