wazuh / wazuh-splunk

Wazuh - Splunk App
https://wazuh.com
GNU General Public License v2.0
50 stars 27 forks source link

Option to view Agents across all API's #1495

Closed atgithub11 closed 1 year ago

atgithub11 commented 1 year ago

Hi,

Not sure if this has already been answered/addressed, but is there a way to view agent counts across all API's under Overview page.

Right now, it only displays for the Wazuh API selected from Quick Settings dropdown. Having an "All" option in there would be great. (Similar to index/sourcetype dropdown)

image
AlexRuiz7 commented 1 year ago

Hello @atgithub11

There is no way to view all agents across APIs under the Overview page of the app. Each set of manager<>agents is managed and displayed independently by design, as each wazuh-manager is agnostic of other managers outside their cluster.

To get the total count of agents, you will need to manually count the agents connected to each manager.