About Agent Operational State on Capture Client Mangement Console

About Agent Operational State on Capture Client Mangement Console

Each Agent has a status reported in the Management Console.

• Not disabled: The Agent is not disabled or in an error state. It might be enabled.
• Disabled completely by the user: A disabled Agent that was rebooted. The Agent functionality is disabled and SentinelOne assets are removed. This Agent is not protected. These functionalities are disabled: Detection, Device Control, Firewall Control, Ranger, and anti-tampering.
• Disabled and not rebooted by the user: The Agent is disabled but was not rebooted. The Agent functionality is disabled, but SentinelOne assets remain. This Agent is not protected. These functionalities are disabled: Detection, Device Control, Firewall Control, Ranger, and anti-tampering. This option is available for Windows Agents only. If this state did not solve an interoperability issue, rebooting the endpoint may help. Rebooting the endpoint will completely disable the Agent.
• Agent disable error: Fetch logs and get help from SentinelOne Support.
• Disabled by SentinelOne: The Agent is disabled by SentinelOne due to a persistent error. This Agent is not protected. These functionalities are disabled: Detection, Device Control, Firewall Control, Ranger, and anti-tampering. This usually occurs when an endpoint does not have available resources. We recommend that you free resources, reboot the endpoint, and enable the Agent. If the issue persists, consult with Support.
• Limited functionality: Agent database corrupted: Agent security capabilities are disabled by SentinelOne due to a persistent database error. This Agent is unprotected. These functionalities are disabled: Detection, Device Control, Firewall Control, Ranger, and anti-tampering. This usually occurs when an endpoint is out of disk space, out of memory, or is a recently-cloned VM. We recommend that you free resources, reboot the endpoint, and enable the Agent. If the issue persists, consult with Support.

Where can I see the Operational State of an Agent?

You can see the Agent Operational State locally after running the "sentinelctl status" command.

Do Sentinel Services run or not when the S1 Agent is disabled.