Objective Output from v7.0.3 and v8

Once the Console has been configured and regenerated, you will see the following output, and options.

Snare Agents

The default tab to be displayed provides a summary of the managed Agents, grouped by status.  The expanded group contains:

Find Agents By Hostname - find a specific agent by typing in the hostname.  This feature is advantageous where there are a high volume of agents displayed.

All Agents - Each agent is listed by its hostname with its current IP Address or DNS name, Operating System, and the version of the Agent.  You may go directly to the Agent's web user interface (Web UI) if desired.Agents marked with a * are non-reporting Agents.  The total number of agents is displayed at the end and only display ten agents at a time, with the option to Show More or Show All where there are more than ten agents available.

The possible status groups are:

Agents matching the master configuration.

These Agents were online and their config perfectly matched the Master Configuration.

Agents with configuration different to the master configuration.

These Agents were online, but their config was found to be different to the Master Configuration.

Agents that cannot be contacted.

These Agents were either offline, configured with an unknown password, have an IP block active, or cannot be reached by the Snare Central Server.

Note: If an Agent is in this group, then there was no way to check the version string or Agent type. This means that Agents which would be ignored by these two filters may show up in here until they can be contacted successfully.

Agents ignored by version string filter.

These Agents were ignored because their version string did not match the specified version string in the configuration.

Agents ignored by hostname filter.

These Agents were ignored because their hostname did not match the specified hostname filter.

Agents ignored by type filter.

These Agents were ignored because they did not match the Agent Type selection (I.e. Snare Agent for Windows v4.1.0, etc).

Master Config

The Master Config tab provides the ability to specify the Agent that the Master Configuration is imported from. 

It will display the options to Clear or Retrieve the config. 

If Clear is selected it will clear out the Master Configuration. This is useful if a bad config has been loaded, and you wish to remove it as a precaution before setting up a working config and refreshing it.

If Retrieve is selected the Refresh Master Config option box is displayed. You can set it to either refresh the Agent Configuration from a custom IP Address or Hostname, or by selecting one of the managed Agents from the dropdown box. Once you select the Agent to retrieve the config from, click the Refresh Master Configuration button. The objective will retrieve the latest copy of the Master configuration. 

Note: Refreshing the Master Config does not compare the configuration with the managed Agents. To do this you need to run the Regenerate option again.  

Also note: The Master Config is cached locally and is only refreshed manually. This means you can take the Master Agent offline or make changes to it and safely Regenerate the objective without it affecting the Master Configuration. 

Once you have refreshed the Master Configuration, it will be listed in full on the page so you can review it to ensure it is what is required. Some Agent Types have a couple of useful fields (like the Destination Address) that are allowed to be edited within this interface. You can make your changes and use the Update Master Configuration button to save it. This is not pushed out to the Master Agent, and will be lost if the Master Config is refreshed again. 

Config Differences

The Config Differences tab is only displayed when there are differences between the Master Configuration and the managed Agent configurations. A list of the Agents is defined, and when each Agent is selected it will display that Agent with its differences, and only shows the fields that do not match. All other fields are the same as the Master Configuration. 

This is the best place to check when there are configuration differences reported between the Agents. It should make the process of checking the differences and resolving them quite easy. 

If a Push is attempted on an Agent type that does not support it, then it will also be listed on this page.

Refresh Specific Agents

Normally when the Regenerate option is selected the objective will refresh every managed Agent. When you are managing a large number of Agents, this can take a while. To get around this, you can select only those Agent(s) that you wish to refresh. The system will then regenerate only these Agents, and use the cache for all the others. 

This is quite useful for testing or fixing up a problem with a specific Agent.

Agent Processing Errors 

This information on this tab will be generated when there are problems communicating with Agents during the regeneration process. Select Show All Errors to view, or filter on the Agents with errors by typing in the Agent Hostname/IP and selecting Filter.

This is the place to check when an Agent is marked as uncontactable, since it will be listed with the reason next to it.