There are various actions you can take on the remote agents to ensure they work as required.
The agent information presented in the remote agent page includes:
More detailed information is provided in the side drawer.
You can perform the following actions from the
more_vert
More menu inside the side drawer
Send installer/docker command: A unique, download link is generated for
each customer to install the agent on the remote site. . You can forward it to them.
Edit: You can edit the following:
Agent name
Log level
Download logs
Disable agent: A disabled agent cannot run actions or connectors or communicate with
Google Security Operations.
Delete agent: You can delete any agent from the platform.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["Agents in Google SecOps SOAR can be managed to ensure they function correctly, with key information provided, such as name, status, version, and last communication."],["A unique installer link can be generated and sent to install the agent on a remote site."],["Agents can be edited to change their name and log level."],["Agents can be disabled or deleted, which will stop communication with Google Security Operations."],["Agent logs can be downloaded."]]],[]]
