Agent Client Collector API
Use the Agent Client Collector (ACC) API to create a flow that executes an osquery command on agents and processes the results. By leveraging the ACC API, you can automate the querying of agent data and
streamline the processing of results, making it easier to monitor and manage system performance.
The system supports osquery 5.7.0, providing compatibility with a range of queries for efficient data collection.
The ACC API enables seamless integration and automation for executing queries and managing agents. Here's how it works:
- Execute osquery commands: You can use the ACC API to send osquery commands to agents. These commands collect a wide range of system and performance data from the target machines.
- Process results: After the osquery command is executed on the agents, the ACC API processes the results and returns the necessary data. This data can be used for monitoring, troubleshooting, or reporting purposes.
- Support for osquery 5.7.0: The ACC API is compatible with osquery 5.7.0, which ensures it supports the latest features and improvements, enabling you to leverage advanced query capabilities for enhanced data collection.
- Enable API features: To use the ACC API, enable the agent and policy APIs. This allows you to configure and manage various aspects of your agents, including their communication, data collection, and query execution.
For details on agent APIs, see Enable agent APIs.
For details on enabling policy APIs, see Enable policy APIs.