Agent Client Collector- Check command denied by Agent allow list

[Vinay Chavhan]

Hi All,

I have built a sub flow in Flow Designer to run a command on Agent machine (Host) to stop a process running on host machine. For this I have used Agent Client Collector Spoke and Selected Run Command on Agent as Action. After running the flow, the error reads "check command denied by the agent allow list"

In any case, can I run the command by modifying Agent Allow List file? or Is there any alternate way of making the agent, run the command on the Host machine it is installed on? So that we can stop the process remotely using Agent.

[Parag_Sanyashiv]

Can you share me the Hierarchy for files you clubbed for creating the plugins?

[Manikandan9]

I attached the plugin for kill-process

[Parag_Sanyashiv]

Hi Manikandan,

I have reviewed the file hierarchy and corrected it. I have attached the correct GS archive which is supported by ACC plugins. I have also drafted the steps that needs to be followed correctly to run a command from ACC using plugin. The acc check allow list naming convention was also wrong which I corrected.

Extract the attached zip file, and you will get the kill-process.tar.gz file which needs to be attached to ACC-plugin and follow the steps in Documentation attached.

Regards,

Parag Sanyashiv

[Manikandan9]

Thanks for your steps shared.

Today we checked and used the plugin shared by you and followed the same steps, now we are getting different error. Please check the attachment for the error that we are facing now. We tried to recreated check-allow-list.json and created new plugin but still getting same error.

Please suggest how to fix this

[Parag_Sanyashiv]

Hi Mani,

This error seems to be straight forward. We can resolve this by replacing the text in check-allow-list.json. Follow below steps:

1. Open the check definition which you created for this test.

2. In the related list of the check definition record, you will find the "Generate allow-list content"

3. Copy the JSON generated after clicking the related link and replace it in "check-allow-list.json" located in C:/ProgramData/ServiceNow/agent-client-collector/cache/kill-process/allow_list/check-allow-list.json.

4. Save the file. And then test the command from Check Definition.

If this process still aborts the execution, then check the agent client collector service running as which user. By default, the service runs as limited/standard user with name ./servicenow. You can stop the service, change it to local system, or make it run as local system, and then start the service again. You can find the ACC service by running "services.msc" command in "Run", then search for Service name: AgentClientCollector.

If this all step solves your issue, kindly mark the solution as correct.

Regards,