Running patterns with the Agent Client Collector? Check out what's new on the Innovation Lab!

[SeverinLauniau]

Pattern Execution with the Agent Client Collector

Dear All,

I am pleased to announce the feature we have all been looking for: the agents are now enabled to execute patterns!!!

More specifically, the agents execute the remote command steps in replacement of ssh and winrm / powershell. The MID still executes the application pattern following the regular sequence. The instance has to be on Utah and ACC-F + ACC-V on version 3.1.0.

You can request the application from here, and the installation steps are in KB1323623.

A few screenshots:

And yes, the Debug mode can now handle the ACC connection as well.

Let's connect once you've requested the application on the Innovation Lab!

Séverin

[C Padmore]

This is fantastic! Exactly what we've been waiting for!!!!

[Martin Austria]

This is really awesome! Looking forward to trying this for our POC.

[Cedric LORIN1]

This is the good moment to test ACC. 🙂

[Stacey Pevec]

Any idea when this may be released to production? We moved to ACC-V discovery for our domain controllers and non-domain joined machines but...this is causing us issues not being able to see these machines in service maps. 

Thanks in advance!

[Cathlene Burk]

This would be so helpful for issues were facing.  We are getting ready to do POC for ACC-V discovery of domain Controllers, I'm putting this on my future list.

[sremerson]

This feature will be released as GA on February 1

[Jim Palmer]

@sremerson 
Does this mean that the patterns execute locally on the ACC-V agent (kind of like how MID servers discover themselves) or does the ACC agents act as a discovery Proxy, allowing other remove discovery patterns to be initiated from the ACC-V agent to a remote target (e.g. vCenter appliances)?

e.g.

• local discovery:
  I use a pattern type discovery on the local ACC-V system to get CPU/memory/disk/running processes from the host running the ACC-V agent.
• remote discovery:
  I use the ACC-V to launch a vCenter HTTPS discovery to a remote target that is otherwise invisible from any MID server.

Note: I have a resources client who wants to use ACC-V for things like CI discovery and Software Asset Management in their production control network (Operational technology) and they are very security focused and need to control at the agent level what data is sent out of the OT network.

And they do not like subnet scanning/remote discovery (e.g. nmap is a giant red flag).

[Stacey Pevec]

@sremerson Thanks Steve, I see it came out in Version 3.4.0 - February 1, 2024. It says support for Pattern running on agents in terminal mode. I cant find any information on what it means to be in terminal mode? 

Stacey

[Jon Runheim]

Are there any plans or timeframes for when the following limitation will be resolved:

• Top-Down Service Mapping is not supported and the connection extensions are not executed

As per KB1323623 - Pattern Execution with Agent Client Collector - Support and Troubleshooting (servicenow.com)

/ Jon

[Jon Runheim]

@SeverinLauniau - The link to the application in the store is no longer working, has it been pulled back?

/ Jon