How to manually select EDR agents list from KATA [KATA/KEDRE]

[Antipova Anna]

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials.

You may want to obtain list of EDR agents ever connected to KATA.

Step-by-step guide

KATA 3.7+

1. Connect to Central Node via ssh, choose Technical support mode, become root:

   $ sudo -i

2. Execute command:

   sudo -u postgres psql antiapt -c "select * from agent_status;"

KATA 4.0/4.1/5.0/5.1

psql -U kluser -h 127.0.0.1 antiapt -c "select * from agent_status;"

All agents with only hostname, ip, last_packet_time columns can be exported this:

psql -U kluser -h 127.0.0.1 antiapt -c "select hostname,ip,last_packet_time from agent_status;" > /tmp/agents

Export all agents from SCNs connected to PCN execute

psql -U kluser -h 127.0.0.1 primarydb -c "select hostname,ip,last_packet_time from agent_status;" > /tmp/agents

Then open Excel and make import from Data -> From Text/CSV from /tmp/agents (download it to local computer first).

The resulting output will be the list of agents.