What is agent_status.json

agent_status.json is a file generated and stored in the RocketAgent installation directory, every 10 minutes and when logs are requested via the RocketCyber console application.

 

This file contains status and environmental information regarding the overall health of the agent.

 

The following sections and attributes are included in the agent_status.json file

 

Name Type Notes
agent_started attribute The local time the agent was started
data_generated attribute The local time the file was generated
agent_version attribute The full version of the agent binary
lua_build_date attribute The compile date of the rocketagent lua
agent_build_date attribute The time the agent was compiled - UTC
lua_memory_usage attribute Size in KB of memory utilized by rocketagent.lua
isolated attribute

true if isolated

false otherwise

health_score attribute

A numeric indicator 0-100 of overall health status of agent.

Calculated as follows:

health score starts with 100%
deduct 10% for more than 2 websocket errors
deduct 10% for more than 2 app_errors
deduct 10% for more than 5 memory events
deduct 10% for more than 2 crash dumps

 

agent_memory_usage object Contains information about current memory utilization by the agent
crash_reports object Contains total number of uploaded crash reports and time of last upload
cpu_sample_data object Contains information about cpu utilization by the agent
system_info object Contains details related to the system the agent is running on such has hostname, IP address, os version etc
websocket_info object Contains details related to the websocket interface including error count and last heartbeat.
app_threads array Contains a list of the apps that are running and their statistics
monitor_threads array Contains a list of the monitor threads that are running and their statistics (KernelService & ThreatCheck) are required for proper agent operation
restart_events array Contains a list of events that caused the agent to restart
thread_errors array Contains a list of fatal errors generated by apps and monitor threads
memory_history array Contains a list of events related to the agent consuming more memory than the maximum allowed threshold

 

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Contact us
Provide feedback for the Documentation team!