logo

NJP

Agent Client Collector Visibility Overview Video

Import · Apr 15, 2021 · video

our customers face more complex challenges than ever when it comes to managing it infrastructure and services they need solutions to enable their own users to innovate and still keep the business running in a way that must be as simple efficient and secure as ever they need accurate near real-time information on demand to design better workflows for it and security operations teams to enable them in this journey we are introducing the agent client collector for visibility or accv hi i'm glenn kaminski and i'm excited to demonstrate agent client collector for visibility for you today [Music] your teams need access to the most up-to-date information possible to address issues and optimize resources especially on endpoints and while agentless discovery is great to gather data it's difficult to take direct action such as running remediation actions and even after the date is collected your teams still need to answer specific questions and that requires the ability to ask those questions on the spot agent client collector is an alternative to our traditional ip-based discovery for customers who are looking for a push-based model where agents run as a background service on the target systems with this agent our customers can rely on more accurate more real-time information to design better workflows in areas such as i t service management monitoring secops software and hardware asset management and that means that accv gives teams the ability to query live data in near real time right in the servicenow solutions they use every day but before we get into the demonstration let me give you a quick introduction of the product and the general architecture of the agent as you see here our agent client collector framework supports not just our accv solution but also monitoring and discovery across a variety of platforms the agent securely connects to servicenow mid servers enabling an active communication between the agent and the servicenow instance in addition the agent client connector spoke also on the servicenow store gives resident developers a framework to write customized workflows or automations to execute on agents or configuration items accv focuses on three major use cases that augment inventory discovery hardware and software asset management along with endpoint data collection itsm by enabling the first responders such as a knock or service desk to directly take action and secops with incident detection and incident response let's jump into the demo once the agents are deployed system administrators can review the status of all deployed agents on the agent health dashboard they see breakdowns by several parameters and can drill down to look more closely at each individual agent as we take a look at the host for this agent we see the agent running as a service on this target node these attributes are the same ones normally retrieved by traditional agentless discovery for the operating system in this case they were collected by discovery scripts executed locally by the agent as we scroll down we can review all the data collected by the agent this is a great time to see how agent client collector helps software asset management teams this customer has enabled software asset management on this instance we can see this by reviewing the software installations tab for this host we see publisher and discovery model information next we can review a list of product software processes where we associated processes to common products using the software asset management content service now that we have recognized products we can define reclamation rules which aggregate usage records populated by the agent to identify unused software for optimization and removal here the agent returns the last execution time of an application on windows providing data on application usage and enabling our customers to have visibility over used and unused licensed products next let's see how itsm teams can use the agent client collector in agent workspace here our support agent is working on an incident for a service outage they see that a configuration item is associated with the incident and two new tabs are available live ci data and playbook which we'll get to in a minute in the live ci data tab the support agent reviews system metrics for the ci that are collected in near real time the data can be refreshed on demand and they can run additional commands and queries for example this one the command output is then displayed in a new tab here let's explore the playbook tab agent workspace now provides automation capabilities with agent client collector in order to collect specific data execute remediation playbooks and confirm the service recovery customers can configure the interface to create their own playbooks finally let's take a look at how agent client collector helps security operations teams with real-time information for security incident response [Music] here we see a secops analyst opening a security incident they can see the configuration items associated and they can access the live data by selecting live data from the menu and clicking on the ci secops teams can also run a predefined os query by selecting the ci from the explore tab and selecting the name of the predefined query alternatively the teams can also run a custom os query by enabling the advanced toggle then typing their sql statement the results for both os queries are then displayed on the incident timeline tab as i wrap up today's demo i've shared the capabilities of the agent client collector as it integrates with our existing products and the general outcomes it delivers to you our customers teams now have access to live data to help diagnose incidents identify opportunities to reclaim software licenses and triage security incidents and they can run pre-built or custom queries right from the solutions they use every day for more information check out the servicenow store and search for agent client collector thank you so much for listening

View original source

https://www.youtube.com/watch?v=xHwVgL7rnhg