Onboarding and Self-Service


Arctic Wolf Unified Portal Telemetry Management

Updated Feb 14, 2024

View Arctic Wolf Agent health

  1. Sign in to the Arctic Wolf Unified Portal. Click Telemetry Management > Agents.

    The Arctic Wolf® Agent health overview provides a summary of how many Agents are healthy, need attention, or are unhealthy. These Agent statuses are associated with each health category:

    • Healthy — Associated with these health categories:
      • Online — The Arctic Wolf Agent has connected within the past 20 minutes and is providing insights to your CST.
      • Offline <72hrs — The Arctic Wolf Agent has been offline for longer than 20 minutes. This is common for a workstation that is not currently in use.
    • Disconnected — Associated with this health category:
      • Offline > 72hrs — The Arctic Wolf Agent has been offline for longer than 72 hours. If the host machine is expected to be online, this could indicate a connectivity problem.
    • Needs Investigation — Associated with this health category:
      • Contained — The Arctic Wolf Agent has successfully contained the host device. Contact your CST at security@arcticwolf.com for assistance.
      • Degraded — The Arctic Wolf Agent is online but not collecting logs. Make sure that your firewall is accepting connections over port 1514. An Agent with a Degraded health category displays these messages in Agent details:
        • Wazuh Connection Failure — Your firewall may not be configured to allow outbound traffic from this endpoint to Arctic Wolf. Check the Allowlist Requirements page for port numbers. If this problem continues, contact your Concierge Team.
        • Wazuh Not Installed — Wazuh may not be installed correctly. Contact your Concierge Team for assistance.
        • Wazuh Service Failure — The Wazuh service failed to start. Contact your Concierge Team for assistance.
        • Last Log Connection — The last time Agent successfully connected to Arctic Wolf.