search cancel

Agents not showing in UI with Linux based endpoint server

book

Article ID: 162266

calendar_today

Updated On:

Products

Data Loss Prevention Endpoint Prevent

Issue/Introduction

Endpoint Agents assigned to a Linux based Endpoint server are not showing up in the agent overview despite having been installed correctly.

Cause

This issue is caused by multiple RHEL Endpoint Servers specifying their hostnames as localhost in the /etc/hosts file.  Example:

127.0.0.1 localhost localhost.localdomain RMHDLPEndpoint

The reason for this is because of how DLP queries the server hostnames.  With the hostname being listed under localhost it is listed as "localhost."  When multiple servers are listed as "localhost" the agent gets confused about which to connect to and we see the issue where the agents do not show up in the UI correctly.

Resolution

The preferred resolution is to create a separate entry for the hostname and the localhost on each RHEL Endpoint Server and recycle the monitor service.  Example:

10.77.222.111   RMHDLPEndpoint 

127.0.0.1 localhost localhost.localdomain

By doing this the server will be listed by its hostname, the agents will know where they are supposed to connect, and they should show up in the UI as expected.