Overview
Agent Heart Beat logs are generated by Snare agents, and can be used to identify systems that are offline, or where the agent has been deactivated.
Agent heart beats are received by the Snare collection subsystem on port 6161 TCP or UDP.
Fields
Field | Description |
|---|---|
DATE | Event date, in the format YYYY-MM-DD |
TIME | Event time, in the format HH:MM:SS |
SYSTEM | The source system |
TABLE | AgentHeartBeat |
AGENTTYPE | The type of agent reporting, for example: Windows, or Epilog |
VERSION | The version of the agent |
ACTION | INFO |
STRINGS | Any extra content sent by the agent |