By default, when the agent in installed, you will have a ready-to-go config with infrastructure monitoring enabled. To make it work - just add an API key. You can find more information here: API keys
<aside> π‘ Where to find a config?
Linux: /etc/icagent/main.conf
Windows: at an installation folder
</aside>
<aside> π‘ File containing credentials is located next to main.conf looks like this:
</aside>
API_KEY = 'InsightCat token'
Below you can find an example of a config for IC Agent. It uses Starlark as a language to configure things. Itβs very flexible and allows you do both simple and complex things like enabling\disabling features, defining pipelines and even writing your own functions to filter and transform data.
<aside> π‘ Find out more about Starlark here: Starlark configuration language
</aside>
# IC Agent uses Starlark for its configuration.
# If you are not familiar with Starlark you can think
# about it as a simplified dialect of Python.
#
#
# print("hello from new config file")
#
load("lib/std.star", "std_main")
load("lib/journald.star", "journald_pipeline")
def configure(config):
# collection of host metrics is enabled by default
# uncomment following line to disabled it
# config.outputs.metrics.disabled = True
# collection of file logs is disabled by default
# to enabled it, uncomment following line
# config.outputs.logs.enabled = True
# config.outputs.logs.patterns = [ "/var/log/*.log" ]
return config
custom_pipelines = [
journald_pipeline(
source = "journald-pipeline",
units = ["ssh", "icagent"],
# remote_exec = "ssh some-remote-host",
),
]
main = std_main(configure, custom_pipelines = custom_pipelines)