topic Re: status service/agent in Linux servers (Redhat) in Cortex XDR Discussions

status service/agent in Linux servers (Redhat)

Marcelo_Campos — Thu, 18 Mar 2021 12:28:23 GMT

Hi everyone,

I have a doubt

how can I check the status of the cortex xdr service / agent in linux?

Thanks in advance.

greetings.

Re: status service/agent in Linux servers (Redhat)

fmoixsante — Thu, 18 Mar 2021 15:40:21 GMT

Hi @Marcelo_Campos,

You check the status of the XDR agent in Linux locally, you need to use the cytool utility that's already in the system after installing the XDR agent.

To check the status of the XDR service you can go to this site

Re: status service/agent in Linux servers (Redhat)

gjenkins — Thu, 18 Mar 2021 15:41:04 GMT

Hi @Marcelo_Campos,

To check the status of the agent processes, please use the following command:

sudo /opt/traps/bin/cytool runtime query

This should yield results similar to the following image indicating that the agent is running properly.

You can find more information here regarding the use of the Cortex XDR agent.

Re: status service/agent in Linux servers (Redhat)

Balaraju — Thu, 15 Sep 2022 08:17:17 GMT

Hello ,

I get above screen , its different from yours , so looks the install has not succeeded . I have tried everything but need a way to find how to fix this agent on Linux . Thanks in advance .

Re: status service/agent in Linux servers (Redhat)

mfakhouri — Thu, 15 Sep 2022 19:47:33 GMT

Hi Balaraju,

I see that the services analyzerd and lted are stopped after checking for the runtime status. Have you tried running the following start command? This should start all of the services listed.

>sudo /opt/traps/bin/cytool runtime start all

From my personal testing, stopping then starting the runtime services yielded the same results as you. 1-2 minutes after running the start command, my runtime query showed all services as running.

Re: status service/agent in Linux servers (Redhat)

Balaraju — Fri, 16 Sep 2022 06:59:02 GMT

Thanks for reply . Below command worked for me .

./cytool reconnect force DistributionID

Re: status service/agent in Linux servers (Redhat)

Anil_Racharla — Wed, 30 Nov 2022 11:17:12 GMT

Hi @Balaraju
How to get Distribution ID ??
I am facing same issue where analyzerd,lted are not running , pls help me here.

Re: status service/agent in Linux servers (Redhat)

Balaraju — Wed, 30 Nov 2022 11:20:24 GMT

Go to Endpoints blade in the left navigation , then go to 'agent installations ' , the first column is Distribution ID , locate the one against your package .