Back to Blog
Otx server7/5/2023 ![]() Asset changes, specifically changes that result in an asset being removed and added back to USM Anywhere, can cause issues with the way the agent associates with the asset if you need to reinstall the agent for any reason. If the AlienVault Agent is installed using the single asset deployment script, its host identifier UUID and asset association is stored in the osquery.flags file in your system. See AlienVault Agent and Asset Associations for more information. When a deployed agent does not have an associated asset, you must manually make this association in USM Anywhere to enable queries and log collection for the host system. In this case, USM Anywhere attempts to associate the AlienVault Agent with an existing asset if there is enough information and it can make a definitive match. Note: If you use a multiple asset installation script to execute bulk deployment across multiple host systems, the script will not have the unique asset ID. Run the script on each Windows host system where you want to deploy the agent: In USM Anywhere, go to Data Sources > Agents.Įnsure that the Multiple Assets tab is selected in the dialog box.To generate an agent deployment script for multiple host systems ![]() You can generate this script from the Agents page (Data Sources > Agents). If you have multiple Windows host systems that are not currently in your USM Anywhere asset inventory or you don't want to generate a separate script for each asset, you can install the AlienVault Agent using a generated PowerShell script on any Windows host system that meets the prerequisite requirements.
0 Comments
Read More
Leave a Reply. |