How to find out how many Snare agents you have installed

Owned by Carlos Osorio
Nov 06, 2020
1 min read


SUMMARY

  • Jan 12, 2017

Version 5 of the Snare agents requires the Snare Agent Manager (SAM), and using SAM is one method of acquiring this information. Use SAM to perform a network scan, however this will only work if the agents web interface is enabled. All legacy agents may be found this way.

If the agent's web interface is not enabled then other software is required that can interrogate all of the hosts to see what software is installed. If Microsoft SCCM is installed then a report may be generated with the information, or other software deployment tools have similar methods to report on what is installed.

Another method is to look at your SIEM server to see what hosts are reporting logs, and do a count from there. Where Snare Servers are installed, you may count how many systems are sending logs.