agent_status.json is a file generated and stored in the RocketAgent installation directory, every 10 minutes and when logs are requested via the RocketCyber console application.
This file contains status and environmental information regarding the overall health of the agent.
The following sections and attributes are included in the agent_status.json file
Name | Type | Notes |
agent_started | attribute | The local time the agent was started |
data_generated | attribute | The local time the file was generated |
agent_version | attribute | The full version of the agent binary |
lua_build_date | attribute | The compile date of the rocketagent lua |
agent_build_date | attribute | The time the agent was compiled - UTC |
lua_memory_usage | attribute | Size in KB of memory utilized by rocketagent.lua |
isolated | attribute |
true if isolated false otherwise |
health_score | attribute |
A numeric indicator 0-100 of overall health status of agent. Calculated as follows: health score starts with 100%
deduct 10% for more than 2 websocket errors
deduct 10% for more than 2 app_errors
deduct 10% for more than 5 memory events
deduct 10% for more than 2 crash dumps
|
agent_memory_usage | object | Contains information about current memory utilization by the agent |
crash_reports | object | Contains total number of uploaded crash reports and time of last upload |
cpu_sample_data | object | Contains information about cpu utilization by the agent |
system_info | object | Contains details related to the system the agent is running on such has hostname, IP address, os version etc |
websocket_info | object | Contains details related to the websocket interface including error count and last heartbeat. |
app_threads | array | Contains a list of the apps that are running and their statistics |
monitor_threads | array | Contains a list of the monitor threads that are running and their statistics (KernelService & ThreatCheck) are required for proper agent operation |
restart_events | array | Contains a list of events that caused the agent to restart |
thread_errors | array | Contains a list of fatal errors generated by apps and monitor threads |
memory_history | array | Contains a list of events related to the agent consuming more memory than the maximum allowed threshold |