13. Managing agents
The agents list, commands, the agent drawer and server-held labels.
This chapter covers two console pages: - Agents → Agents: the fleet inventory, live status, per-agent commands and the detail drawer. - Activity → Audit Log → Server-held labels: the label registry for files that cannot carry a label inside them.
Agent behaviour (modules, sync interval, file scanning, tamper protection, logs) is configured in Policy → Rules → Agent Rules and Policy → Rules → Logs (chapter 10). Policy groups are defined in Policy → Groups. This page monitors and manages the agents themselves.
In this topic
- 13.1 How agents talk to the
server
The sidebar counter next to Agents shows online/total , for example 42/45 . The top bar also has an N/M agents online button that opens this page. The list refreshes every 15 seconds while the browser tab is visible,…
- 13.2 Agents → Agents — the list
Agents → Agents lists every agent that has ever sent a heartbeat. The page has a Refresh button and a Columns ▾ picker. There is no search box or filter: sort by any column header instead (click once for ascending,…
- 13.3 The agent detail drawer
Click a hostname to open the drawer on the right. - Title: the hostname. - Subtitle: <user> · online|offline . - Close: the ✕ in the header.
- 13.4 Typical tasks
Find machines that have not taken the latest policy 1. Note the policy version in the top bar. 2. On Agents → Agents , sort by Policy ver. 3. For offline machines (⚪), check Last seen . 4. For online machines with an…
- 13.5 Agent states at a glance
You see Meaning What enforcement does Online, Licensed Normal Full Offline No heartbeat for 180 s Continues from the cached, signed policy. Updates and commands wait (commands up to 15 min). Disabled disable command…
- 13.6 Server-held labels
(label registry)
Activity → Audit Log → Server-held labels (sub-tab next to Audit Log ) lists files whose label could not be written into the file, and is therefore recorded on the server. The typical case is a PDF protected against…