lacework agent list

List all hosts with a running agent

Synopsis

List all hosts that have a running agent in your environment.

You can use 'key:value' pairs to filter the list of hosts with the --filter flag.

lacework agent list --filter 'os:Linux' --filter 'tags.VpcId:vpc-72225916'

NOTE: The value can be a regular expression such as 'hostname:db-server.*'

To filter hosts with a running agent version '5.8.0'.

lacework agent list --filter 'agentVersion:5.8.0.*' --filter 'status:ACTIVE'

The available keys for this command are: * agentVersion * hostname * ipAddr * mid * mode * os * status * tags.arch * tags.ExternalIp * tags.Hostname * tags.InstanceId * tags.InternalIp * tags.LwTokenShort * tags.os * tags.VmInstanceType * tags.VmProvider * tags.Zone * tags.Account * tags.AmiId * tags.Name * tags.SubnetId * tags.VpcId * tags.Cluster * tags.cluster-location * tags.cluster-name * tags.cluster-uid * tags.created-by * tags.enable-oslogin * tags.Env * tags.GCEtags * tags.gci-ensure-gke-docker * tags.gci-update-strategy * tags.google-compute-enable-pcid * tags.InstanceName * tags.InstanceTemplate * tags.kube-labels * tags.lw_KubernetesCluster * tags.NumericProjectId * tags.ProjectId

lacework agent list [flags]

Options

      --filter strings   filter results by key:value pairs (e.g. 'hostname:db-server.*')
  -h, --help             help for list

Options inherited from parent commands

  -a, --account string      account subdomain of URL (i.e. <ACCOUNT>.lacework.net)
  -k, --api_key string      access key id
  -s, --api_secret string   secret access key
      --api_token string    access token (replaces the use of api_key and api_secret)
      --debug               turn on debug logging
      --json                switch commands output from human-readable to json format
      --nocache             turn off caching
      --nocolor             turn off colors
      --noninteractive      turn off interactive mode (disable spinners, prompts, etc.)
      --organization        access organization level data sets (org admins only)
  -p, --profile string      switch between profiles configured at ~/.lacework.toml
      --subaccount string   sub-account name inside your organization (org admins only)

See also

• lacework agent - Manage Lacework agents