Creating an agent

A KUMA agent consists of two parts: one part is created inside the KUMA web interface, and the second part is installed on a server or on an asset in the network infrastructure.

An agent is created in several steps:

1. Creating a resource set for the agent in the KUMA web interface
2. Creating an agent service in the KUMA web interface
3. Installing the server portion of the agent to the asset that will send events

KUMA agents for Windows devices can be created as follows:

• Manually by creating a set of agent resources and creating an agent service in the KUMA web interface.
• Automatically when creating a collector of the wmi, wec, or etw transport type. Although the set of resources and service of these agents are created in the Collector Installation Wizard, they must still be installed to the asset that will be used to forward an event. In a manually created agent, a connector of the etw type can be used in only one connection. If you configure multiple connections in a manually created etw agent, the status of the etw agent status is green, but events are not transmitted and an error is logged in the etw agent log.

Multiple agents can be installed on a device; the version of all such agents must be the same.

If an older version of the agent is already installed on the device where you want to create an agent, you must first stop the installed agent (remove the agent from a Windows device or restart the agent service on a Linux device), and then you can proceed to create a new agent. However, if the version of the installed agents is the same as the version of the agent that you want to create, stopping the agents is not necessary.

When creating and running an agent whose version is 3.0.1 or later, you must accept the terms and conditions of the End User License Agreement.

In this section Creating a set of resources for an agent Managing connections for an agent Creating an agent service in the KUMA web interface Installing an agent in a KUMA network infrastructure Automatically created agents Update agents Transferring events from isolated network segments to KUMA Transferring events from Windows machines to KUMA

Page top