> For the complete documentation index, see [llms.txt](https://docs.infraon.io/log-management/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.infraon.io/log-management/user-guide/infraon-configuration/log-management/log-agent-configuration.md). # Log Agent Configuration Log Agent Configuration is used to configure how log agents collect and forward log data from devices or servers to the Infraon Log Management system. A log agent typically runs on a device or server and collects logs from configured sources. It then forwards these logs to the log management system, where it can process, parse, store, search, and analyze them. ## **How does it work?** Log Agent Configuration allows administrators to configure how log agents collect and forward log data from devices or servers to Infraon Log Management. The agents send the collected logs to the configured pipeline, where the logs are processed and routed to the appropriate stream for storage, search, and analysis. This enables centralized log monitoring across multiple devices and servers. * Log collection: Collects log data from configured sources. * Log forwarding: Sends collected logs to the log management system. * Centralized monitoring: Makes logs from multiple devices available in one place. * Troubleshooting and analysis: Helps administrators investigate errors, events, and system activity. **Log Agent Configuration vs. Pipeline Configuration**


Configuration	Purpose
Log Agent Configuration	Defines how the log agent collects and forwards log data. The exact settings depend on the available options in the product.
Pipeline Configuration	Defines how incoming logs are received, processed, and routed to the appropriate output or stream.

## **What you see on the screen** The Log Agent Configuration page displays the configured log agents and their associated details. Administrators can view agent information, edit or delete individual agents, and select multiple agents for bulk deletion. Log Agent Configuration | **Basic Details**


Label	Actions	Description/Example
Name	View	Displays the name of the configured log agent, such as Default Windows Agent or Default Linux Agent.
Agent Type	View	Displays the type of log agent, such as Windows Log Agent or Linux Log Agent.
Host Name	View	Displays the hostname of the device associated with the agent.
Inventory Agent Linked	View	Displays the number of inventory agents linked to the log agent, such as 1.
Log Collectors	View	Displays the IP address and port of the associated log collector, such as 10.0.4.132:5048.
Action	Edit or Delete the agent	Provides options to edit or delete an individual log agent.
Bulk Delete	Select one or multiple agents for bulk delete	Allows you to select multiple log agents for bulk deletion.

### **Agent Action Profiles** The Agent Action Profiles section displays the history and results of actions performed on log agent profiles, such as Check Configurations and Install in the Inventory Agent page. It allows administrators to review agent validation results and identify devices with issues. Log Agent Configuration | **Agent Action Profiles**


Label	Action	Description/Example
Agent Action Profiles	Open Log Agent Configuration and view the agent action profiles.	Displays the history of actions performed on log agent profiles and their results.
Created At	View the table entry.	Displays the date and time when the action was initiated.
Total Agents Triggered	View the table entry.	Displays the total number of agents for which the action was triggered.
Valid Agents	View the table entry.	Displays the number of agents that passed validation.
Invalid Agents	View the table entry.	Displays the number of agents that failed validation.
Status	View the table entry.	Displays the overall result of the action, such as Invalid.
Created By	View the table entry.	Displays the name of the user who initiated the action.
Log Agent Configurations	Click Log Agent Configurations.	Opens the log agent configurations view.
Info	Click the information icon in the Action column.	Opens the Agent Actions Profiles Device Status view, which displays device-level results for the selected action.
Action	View the table entry.	Displays the action performed, such as Check Configurations or Install.

Agent Action Profile | **Actions**


Label	Action	Description/Example
Agent Actions Profiles	Click	When you click the Info icon, the device status view displays the results for individual devices, including their hostnames, IP addresses, operating systems, status, and messages.
All	Click All.	Displays all devices included in the selected agent action.
Invalid	Click Invalid.	Displays devices marked as invalid.
Pending	Click Pending.	Displays devices with a pending status.
Success	Click Success.	Displays devices for which the action completed successfully.
Failed	Click Failed.	Displays devices for which the action failed.
Configuration Wrong	Click Configuration Wrong.	Displays devices with configuration issues.
Search	Enter a search term.	Searches the device status records.
Host Name	View the device record.	Displays the device hostname, such as 336-Dhusnic-DM-EIMS.
IP Address	View the device record.	Displays the IP address or addresses associated with the device.
OS Name	View the device record.	Displays the operating system, such as Microsoft Windows 11 Pro.
Status	View the device record.	Displays the result for the device, such as Invalid.
Message	View the device record.	Displays details about the device status, such as Agent is not reachable or Log agent is in Running state.
Close	Click X.	Closes the device status view.

## **Add Log Agent Profile** The Add Log Agent page allows administrators to create a log agent configuration by specifying agent details, selecting inventory agents, configuring log sources, and defining log collector hosts. Add Log Agent | **Log Agent Details**


Label	Action	Description/Example
Agent Name *	Enter a name.	Specifies the name of the log agent configuration.
Agent Type *	Select an agent type.	Specifies the type of log agent. Example: Windows Log Agent.
Inventory Agents *	Select an inventory agent.	Associates the configuration with the selected inventory agent.
Log Agent Configurations	Configure	This section allows you to configure log sources and define filtering or collection settings for each source.
Windows Configuration	Configure the available log sources.	Displays the configuration options for the selected Windows Log Agent.
Log Source	Select a source from the dropdown.	Specifies the log source to configure. Examples: Application, System, Security, Windows PowerShell, and ForwardedEvents.
Configuration Value	Enter the required configuration.	Specifies additional settings for the selected source. Examples: ignore_older: 72h, event_id: 400, 403, 600, 800, and tags: [forwarded].
Delete	Click the delete icon beside a configuration row.	Removes the corresponding log source configuration.
Add Configuration	Click Add Configuration.	Adds another row to configure an additional log source.
Input	Configure	This section allows you to specify the log collector host information for the agent configuration.
Log Collectors	Enter the log collector address.	Specifies the log collector host or endpoint associated with the configuration.
Delete	Click the delete icon beside the host field.	Removes the corresponding log collector entry.
Add Host	Click Add Host.	Adds another host entry for a log collector.

After configuring the required details for the log agent, click Save to save the configured log agent.