Monitoring SES Evolution agents

An event is a grouping of several identical logs generated on several agents.

• The New security events to analyze tile shows the following information without time limit:

  • Number of New Emergency and Alert events,

  • Number of agents affected,

  • Number of events that appeared over the past 24 hours,

  • Percentage of the latest events that appeared over the past 24 hours, out of the total number.

  Click on the number to see the list of New Emergency and Alert agent logs.

• By default, the other Events... tiles show indicators over the past 24 hours. You can modify this period from the drop-down list in the top right corner.

  Click on the title of the Events... tiles or on the various parts of the diagrams or lists to go directly to the Environment > Agent logs panel and see the list filtered by the selected period and type of indicator.

• The Agents connected tile shows the number of agents that reconnected to their agent handler within the normal time defined for their group.

• The Agents updated tile shows the number of agents whose software, policy and configuration versions match those defined by their agent group. They may sometimes have a higher software version if it cannot revert to an older version and if these agents were forced to update.

• The Agent status tile shows whether agents are in one of the following statuses:

  Status	Description
  Waiting for restart	The agent had to be restarted to complete an installation, an update or to apply changes.
  Maintenance	Maintenance mode is enabled on the agent.
  Disabled	The agent was disabled by a challenge.
  Invalid	The agent reported issues after an integrity check.

  Click on the circles, text and numbers of agents to go to the Agents panel and view the filtered list.

  Click the tile titles to go directly to the general panel for agents. For more information, please refer to the section Viewing agents in the console.

  Click to export the list of all agents in the pool, or a list of agents by status, to a .CSV file.

• The Isolated agents tile shows the number of isolated agents on the network and their isolation status:

  Isolation status	Description
  Isolated	Agent that was isolated from the network
  To be isolated	An isolation was requested for the agent, but the agent has not run it yet.
  Undoing isolation pending	A request to undo isolation was submitted for the agent, but the agent has not run it yet.

  Click on each part of the chart to go directly to the Isolate panel and view the filtered list.

  Click the tile title to go directly to the general isolation panel. For more information, refer to the section Isolating computers from the network.