Forum Discussion

Cole_McDonald's avatar
Cole_McDonald
Icon for Professor rankProfessor
12 months ago

Finding the culprit for TCP_StatsCollector ConnectionsEstablished alert for Windows collectors

From the collector’s device page in the LM Portal or the collectors page, get to a debug console, then here’s your !POSH one-liner to get  info about the destination device that is holding your ports...
collector
collectors
establishedconnections
network
ports
powershell
Cole_McDonald's avatar
Cole_McDonald
Icon for Professor rankProfessor
12 months ago

Freaking awesome. Now if there were a way for LM to action this script when this particular alert happens and put a note on the alert.  hm….

escalation step <execute script> would take care of this :)

It would allow so much extra power!  initial remediation automation.  more complex integrations.  API injection (which would fulfill your ask)