Managing Sensor service from the Console

Requirements

• Capsule8 Sensor version 4.1.1+
• Capsule8 Console version 4.1.0+

Notes

Using policy_input will ignore any configuration in /etc/capsule8/capsule8-analytics.yaml.

How to enable

1. Set CAPSULE8_CONSOLE_POLICY_CONFIG_ENABLED in the console deployment to true

2. Get a 10 year token from the console. There are two ways to do this:

   • Generate a token on the command line capsule8-console generate-token --host
   • With CAPSULE8_CONSOLE_ALERT_BLOB_STORAGE_ENABLED set to false, click the “Add Host” button on <console-url>/app/hosts

3. Edit /etc/capsule8/capsule8-sensor.yaml

policy_input:
  url: <http|https>://<console-url>/policy/via-metadata
  headers:
    Authorization: "BEARER <token>"

How to control a sensor

1. Under the “Hosts” page <console-url>/app/hosts, click on a host you would like to control the sensor for.

2. You can find additional information about the sensor and control it from the “Sensor” section.