Importing a file with a list of servers for WMI agents
You can import a .TSV file with a list of event sources for WMI agents, meaning you do not have to manually fill in the fields in the Remote hosts section of the WMI agent settings for each server, when there are many such servers. In such a file, you can prepare a list of servers to which the WMI agent will connect and a list of logs that you want to receive from the specified servers.
If you change the recommended format to All files and upload a file that does not comply with the required format (for example, a JSON file, XML file, etc instead of TSV), such a file may be parsed incorrectly.
The maximum number of lines in a file with host settings is 500.
The following fields are required:
Server is the name of the host from which the agent will receive logs. Acceptable format: hostname or IP address. Acceptable values: IPv4, IPv6, host name.
Domain is the host ID, for communication with the host over the network. Acceptable format: fully qualified domain name or IP address. Acceptable values: IPv4, IPv6, FQDN.
Log type is a list of logs and/or Windows subscriptions that the agent will receive. Acceptable format: array of strings. For example, Application, ForwardedEvents, Security. If the file specifies a value that was not previously present in the list of logs, the log or subscription must be created that will also appear in the list of available for processing by the Windows Agent.
The maximum length of a log value is 1024 characters. You must specify at least one log or subscription.
After importing and filling in all the fields of the remote hosts, a check is performed when you save settings. If any errors are found in the fields, the settings are not saved, and the errors are highlighted. You can manually update the fields as necessary and save the settings.
This opens a window; in that window, on the Config # tab, under Connector, select Remote hosts and click the Import button.
This opens a window; in that window, select the prepared file with the list of sources in the .TSV format.
KUMA parses the file and fills in the Remote hosts section, fills the Server, Domain, and Log type required fields.
If necessary, in the Secret drop-down list, select a secret of the Credentials type or create a secret of the Credentials type. This setting is optional.
When importing a list of hosts from a file, in the Secret drop-down list, Default remains selected, and the agent uses the default credentials when communicating with the server to retrieve logs.
If you want to cancel the import of data from the file, click Cancel. If you want to delete some data lines imported from a file, in the user interface, select the lines you want to delete and click Delete.
To save settings, do one of the following:
For a newly created agent, click Create. The service is created in the KUMA web interface.
For an active agent opened for editing, click Save.
To apply the saved settings, do one of the following: