Do insight agents record any location data?

would like to gather some basic geo location data from the agents to help categorize them.

Hi Hayden,

yes the agents do collect the public IP address of the host machine and in agent management you can view the GeoIP location.

Within the query bar you can query for

agent.countryName CONTAINS

example: Screen Shot 2021-05-12 at 1.29.22 PM

Currently this data is also available via an API (Graphql API which the backend for Agent Management) but the API is in preview State, if you’d like to get access please reach out to your CSM.

David

thanks David, but no state level or city I assume. Maybe ICON is a good use case for the public ips.

Correct you currently cannot filter further from within agent management, but using the Graphql API you could.

This is the location information available via the API
“location”: {
“city”: “Dublin”,
“continent”: “Europe”,
“countryCode”: “IE”,
“countryName”: “Ireland”,
“region”: “L”
}

Otherwise a geoIP lookup using ICON would also work.