Monitoring SES Evolution agents

The Security tab in the dashboard provides a quick overview of the most critical events that occur on your pool, and the status of SES Evolution agents.

An event is a grouping of several identical logs generated on several agents.

  • The New security events to analyze tile displays the following information without a time limit:

    • Number of New Emergency and Alert events,

    • Number of agents affected,

    • Number of events that appeared over the past 24 hours,

    • Percentage of the latest events that appeared over the past 24 hours, out of the total number.

    Click on the number to see the list of New Emergency and Alert agent logs.

  • By default, the other Events... tiles show indicators over the past 24 hours. You can modify this period from the drop-down list in the top right corner.

    Click on the title of the Events... tiles or on the various parts of the diagrams or lists to go directly to the Environment > Agent logs panel and see the list filtered by the selected period and type of indicator.

  • The Agents diagram shows the number of agents and their status.

    Status Description
    Up-to-date The software, policy and configuration version of the agent matches the version defined in its agent group. The agent may sometimes have a higher software version if it cannot revert to an older version and if the agent was forced to update.
    Connected The agent connected back to its agent handler within the normal period defined in its group.
    Disabled The agent was disabled by a challenge.
    Waiting for restart The agent had to be restarted to complete an installation, an update or to apply changes.
    Maintenance Maintenance mode is enabled on the agent.
    Invalid The agent reported issues after an integrity check.

    Click on the circles, text and numbers of agents to go to the Agents panel and view the filtered list.

    Click on Agents at the top left side of the tile to go to the general panel for agents. For more information, please refer to the section Viewing agents in the console.

  • The Isolated agents diagram shows the number of agents isolated from the network and their isolation status:

    Isolation status Description
    Isolated Agent that was isolated from the network
    To be isolated An isolation was requested for the agent, but the agent has not run it yet.
    Undoing isolation pending A request to undo isolation was submitted for the agent, but the agent has not run it yet.

    Click on each part of the chart to go directly to the Isolate panel and view the filtered list.

    Click on Isolated agents at the top left side of the tile to go directly to the general isolation panel. For more information, refer to the section Isolating computers from the network.