Imperva Cyber Community

communities_1.jpg
Β View Only

  • 1.  DAM Agent Disabling Mechanism

    Posted 10 days ago

    Hello Imperva Community Members,

    I have set the following CPU Usage Restricting limits for the Imperva DAM Agent:

    • CPU Usage Limit (Percentage): 15%
    • Time to Reactivate After Disabling (Seconds): 60

    Given this configuration, if the CPU usage exceeds the specified limit, the agent will be disabled. I would like to know if there is any mechanism or technique available to check whether the DAM agent was disabled due to reaching the defined threshold.


    #DatabaseActivityMonitoring
    #ImpervaAgent

    ------------------------------
    Regards,
    𝐌𝐒𝐭𝐞𝐬𝐑 𝐌𝐞𝐑𝐭𝐚
    Senior Security Consultant
    Mumbai
    ------------------------------


  • 2.  RE: DAM Agent Disabling Mechanism

    Posted 3 days ago

    Hi,

    you can check it in two ways:

    1. agent logs on MX GUI -> Setup -> Agents -> here you can find all info about event
    2. using MX GUI -> Polices -> System Events -> add new -> use: Agent status changed and/or Agent CPU usage. You can send these alerts to SIEM/Syslog.



    ------------------------------
    Karol Gruszczynski
    IT Security Expert
    Trafford IT Sp. z o.o.
    Warszawa
    ------------------------------

    Original Message