Agent status

Information on the status of Kaspersky Container Security agents is presented as a table in the Components → Agents section; it is also expanded in the sidebar for the selected agent.

The table displays the following information for each agent within an agent group:

• Agent name.
• Status. The solution assigns one of the following connection statuses:
  • Connected means the agent is connected and is functioning normally.
  • Disconnected means the agent is disconnected.
  • Pending means the solution is in the process of connecting the agent.

  The status is assigned in accordance with the data of the last heartbeat message for the agent, according to the entry in the security event log.

• Version. The solution displays the current version of the agent. If a new version of the agent is available for the installed version of Kaspersky Container Security, the latest available agent version is displayed.
• Pod. The solution displays the name of the pod in which the agent is deployed.
• Information received as part of node status monitoring. The solution provides information about network activity monitoring and analysis actions, processes in containers, and File Threat Protection. For each action (Container processes, Network connections, and File Threat Protection), its status is displayed—Enabled or Disabled. If an agent is disconnected, all node status monitoring actions have the Disabled status.

  If the agent is connected, the last status of the agent is also displayed for each action—Success, Not available, or Error. If Error is displayed, the solution displays a brief description of the error and associated details.

  Agent statuses are displayed only for connected node-agents in which installed runtime agents scan the node. The status of kube-agents is always Not available because runtime agents are not deployed to them.

  The solution displays this information based on the security event log records.

• Date and time of last connection.

You can view information about the status of a specific agent in the sidebar. To open the sidebar, double-click the agent name in the table. Kaspersky Container Security displays the following information about the selected agent:

• Agent name.
• IP address of the agent.
• The name of the pod with which the agent is associated.
• Name of the node where the agent is deployed.
• Agent type.
• Version of the node where the agent is deployed (primary or worker)
• The agent connection status—Connected, Disconnected, or Pending.
• Date and time when the agent last connected
• Under Node monitoring statuses, the solution displays information about the last registered state of the agent (Success, Not available, or Error) for each node monitoring action (Container processes, Network connections, and File Threat Protection). If an action is disabled to avoid unnecessary workload on nodes, the Disabled status is displayed.
• Under Agent group, the solution displays the following information about the agent group to which the selected agent belongs:
  • Group name
  • Namespace
  • Orchestrator

To view information about the status of agents, you need permissions to view and manage the Agents component. By default, these permissions are granted to the IS Administrator role.