Configuring container monitoring in the command line

In the command line, you can enable or disable real-time scanning of namespaces and containers by using the NamespaceMonitoring=Yes/No setting from the general application settings.

You can edit the value for the setting NamespaceMonitoring using the configuration file that contains all general application settings, or using command line keys.

When scanning namespaces and containers in real time, the general Container Scan settings are used. You can view and edit these settings using special administration commands for Kaspersky Endpoint Security:

• You can output the current values of general Container Scan settings to the console or to a configuration file. You can use this file to edit the settings.
• You can edit all general Container Scan settings using the configuration file that contains the settings. You can get the configuration file using the command for displaying general Container Scan settings.
• You can edit individual settings using command line keys in the format <setting name>=<setting value>. You can get the current values of the settings using the command for displaying general Container Scan settings.

To output the current values of general Container Scan settings to the console, execute the following command:

kesl-control --get-container-settings [--json]

where --json is specified to output the settings in JSON format. If the --json key is not specified, the settings will be imported in the INI format.

To output the current values of general Container Scan settings to a file, execute the following command:

kesl-control --get-container-settings --file <path to configuration file> [--json]

where:

• --file <path to configuration file> is the path to the file where the general Container Scan settings will be saved. If you specify the name of a file without specifying its path, the file will be created in the current directory. If a file with the specified name already exists in the specified path, it will be overwritten. If the specified directory cannot be found on the disk, file will not be created.
• --json is specified to output the settings in JSON format. If the --json key is not specified, the settings will be imported in the INI format.

To edit the values of the general Container Scan settings using a configuration file:

1. Output the general Container Scan settings to the configuration file, as described above.
2. Edit the values of the necessary parameters in the file and save the changes.
3. Execute the command:

   kesl-control --set-container-settings --file <path to configuration file> [--json]

   where:

   • --file <path to configuration file> is the full path to the configuration file with the General Container Scan settings.
   • --json: specify this key if you are importing settings from a configuration file in JSON format. If the --json key is not specified, the application attempts to import from an INI file. If the import fails, an error is displayed.

All the values of the general Container Scan settings defined in the file will be imported into the application.

To edit values of general Container Scan settings using command line keys, execute the following command:

kesl-control --set-container-settings <setting name>=<setting value> [<setting name>=<setting value>]

where <setting name>=<setting value> is the name and value of one of the general Container Scan settings.

The values of the specified general Container Scan settings will be changed.