Agent
Probe
2 min
probe (optional separate service) typically runs on a dedicated server or workstation within the client's lan acts as a local aggregator and point of contact functionality details role reduce outbound internet bandwidth by aggregating data from lan agents act as a local cache (e g , for patch downloads future) monitor local network devices via snmp potentially facilitate lan based actions (e g , wake on lan) deployment & discovery installation separate installer for windows service / linux daemon discovery agents could find the probe via dhcp option, dns srv record ( commandit probe tcp local), or manual configuration pushed via policy from commandit configuration locations/sites in commandit can be configured with primary and optional backup probe ips/hostnames this config is pushed to agents assigned to that location data aggregation & communication agent > probe agents send heartbeats, inventory data, logs, compliance status to the probe using a secure local protocol (https on a specific port) aggregation probe batches data from multiple agents before forwarding to commandit for heartbeats, it might just send a summary ("x agents checked in") probe > commandit probe communicates with commandit api similar to how a direct agent would, but potentially handling data for many devices needs robust error handling and queuing if commandit is unavailable security secure channel between agent and probe (tls with potentially local certs), and probe and commandit (standard tls) failover agent logic if agent cannot reach primary probe (timeout), it attempts backup probe if backup fails, it connects directly to commandit cloud endpoint recovery agent periodically retries connecting to probes even if currently connected directly to commandit snmp monitoring configuration probe receives list of snmp devices (ips), versions (v1, v2c, v3), community strings/v3 credentials, and oids/mibs to monitor from commandit (assigned per location) polling probe performs snmp get requests at configured intervals alerting compares results against thresholds (defined in commandit) sends alerts to commandit if thresholds are breached or device is unreachable mibs decide if probe needs mib files locally or if commandit provides pre translated oids including common mibs (e g , if mib, host resources mib) locally is often useful