Specify Agent Server URL
Overview
This procedure is optional for Linux agent v6.2, Windows agent v1.6, and later versions.
The Lacework agent uses a region-specific agent server URL to communicate with the Lacework platform. Lacework supports the following regions and URLs:
Region | URL |
---|---|
US (default) | https://api.lacework.net |
US-02 (US) | https://aprodus2.agent.lacework.net |
European Union (EU) | https://api.fra.lacework.net |
Australia and New Zealand (ANZ) | https://auprodn1.agent.lacework.net |
By default, agents use the https://api.lacework.net URL in the US region.
- You must explicitly configure the agent server URL for the following using the instructions in Configure Agent Server URL:
- Linux agent v6.1 and Windows agent v1.5 or earlier installed outside the default region (US)
- Windows agents installed on Windows Server 2012 R2 and Windows Storage Server 2012 R2. For more information, see Agent Server URL for Windows Server 2012 R2 and Windows Storage Server 2012 R2.
- Starting with Linux agent v6.2 and Windows agent v1.6, it is optional for you to configure the agent server URL even if you install the agent outside the default region. The agent automatically discovers the agent server URL for your region.
To automatically discover the agent server URL:
- Linux agent v6.2 or later agents for which you have not configured the agent server URL will first communicate with https://api.lacework.net that is located in the US region to know the region they belong to, and then use only the region-specific URL.
- Windows agent v1.6 or later agents for which you have not configured the agent server URL will first communicate with https://agent.lacework.net that is located in the US region to know the region they belong to, and then use only the region-specific URL.
- The agents for which you have configured the agent server URL will first communicate with the configured server URL to know the region they belong to.
Configure Agent Server URL
You can configure the agent server URL in the Lacework Console or in the config.json agent configuration file.
Configure Agent Server URL in the Lacework Console (For Linux Agents Only)
Login to the Lacework Console.
Go to Settings > Configuration > Agent Tokens.
Click on the row for the token that the agent is using.
The Access Token page appears.
Click the Configure tab, then click the Edit icon .
Click Agent administration settings.
Specify the URL in the Agent server URL field.
Configure Agent Server URL in the config.json File (For both Linux and Windows Agents)
You can configure the agent server URL using the serverurl
property in the config.json file as shown below:
{
"serverurl": "Your_Server_URL"
}
Where Your_Server_URL
is the agent server URL for your region.
Agent Server URL for Windows Server 2012 R2 and Windows Storage Server 2012 R2
You must explicitly configure the agent server URL for Windows agents running on Windows Server 2012 R2 and Windows Storage Server 2012 R2.
Do the following to find the agent server URL to be used during installation:
Login to the Lacework Console.
Go to https://YourLacework.lacework.net/api/v1/profile/info.
Replace
YourLacework
with your Lacework application name in the URL.Search for
ENV_TYPE
.If ENV_TYPE is Use the following agent server URL "ENV_TYPE":"prodn"
https://api.lacework.net "ENV_TYPE":"aprodus2"
https://aprodus2.agent.lacework.net "ENV_TYPE":"euprodn"
https://api.fra.lacework.net "ENV_TYPE":"auprodn1"
https://auprodn1.agent.lacework.net