Logo
Resources
Documentation Portal Ideas Portal Logpoint Academy License Portal
Resources
Documentation Portal Ideas Portal Logpoint Academy License Portal
Sign in
  1. Logpoint Service Desk
  2. Products Hub
  3. AgentX

AgentX Manager

Avatar Prithul Pokhrel
July 18, 2025 08:04
Follow

AgentX Manager is a security software component of AgentX responsible for managing and communicating with AgentX clients deployed across a network. It provides a centralized platform for monitoring and analyzing security events, enabling organizations to detect and respond to threats.

Release Date: 15th July, 2025

Release Version: 1.7.0

Supported On: Logpoint 7.6.0 and later

Download: AgentX_1.7.0.pak

SHA256: 6f2ac874f1e23ef5defc732f9d9554e7f9c0bf25236fdf09a4c2002f49606b57

Documentation: AgentX Guide

Key Information

  • To ensure compatibility, upgrade AgentX Manager, AgentX Server, and AgentX Client sequentially to version 1.7.0. Using an older client version may result in the loss of logs without labels.
  • If OSQuery is not installed during the AgentX Client installation and later enabled in a template, AgentX will monitor non-existent files, resulting in warning log messages. To prevent this, make sure OSQuery is installed before using it in a template.
  • Users should not change the installation directory from the previous installed directory when upgrading to AgentX v1.7.0 through the Command Line Interface.

Bug Fix:

Description

Issue ID

Reference ID

If the agent settings were not updated, they continued using the default settings that lacked the required label field. As a result, the agents forwarded logs without labels, leading AgentX to reject those logs.

EDR-1404

76879, 77104, 77270, 80892, 80912, 84362, 85052

Users could not access the Agents list because AgentX servers were overloaded while populating agent information, resulting in frequent delays and timeouts.

EDR-2626

 85987 ,  86546 

When AgentX was used with an LPC, saving a template on Logpoint Collector displayed a misleading warning about pending encryption/decryption.

EDR-2179

85830 

The AgentX dashboard displayed only 200 agents due to a pagination limitation, restricting visibility to all agents.

EDR-1533, EDR-1901, EDR-1870

78808, 89474, 86546, 89474, 89887

The Last Config Update displayed time in UTC, regardless of the timezone selected in User Preferences. 

EDR-2140

85690

AgentX Manager couldn’t add or remove devices in bulk in distributed environments with many agents.

EDR-2964

89077

In a distributed environment, AgentX certificates could not be generated or downloaded from other remote Logpoints.

EDR-2971

89168

When users silently upgraded the Windows client, the manager’s IP address was reset to 0.0.0.0.

EDR-3052, EDR-3087

-

Migration from Logpoint Agent to AgentX failed if a template with an identical name already existed in both LPA and AgentX.

EDR-2979

-

The default registry monitoring parameters had a high recursion depth, which caused locks during deep scans and blocked monitoring of File Integrity Scanner and other modules until the scans were completed.

EDR-2682

85715, 86156, 86669

In some cases, the installation of OS Query failed if other packages were still being installed.

EDR-3050

89214, 89574

In environments with a high number of agents, AgentX Manager repeatedly checked agent availability, leading to API request overload and resulting in frequent timeouts and delays.

 EDR-2628

85987, 86546, 86837

OSQuery logs were duplicated, increasing the risk of disk space exhaustion.

EDR-2165, EDR-2634

85319, 85987, 86101, 86546, 89187

Previous Releases

AgentX Manager v1.6.0

Release Date: March 25, 2025

Release Version: 1.6.0

Supported On: Logpoint v7.5.0 and above

Download: AgentX_1.6.0.pak

SHA256: eb4d858c84dc05c84e3c66a7a76ee8550a6f3d69c36c5e32d3abeb91cb7c3ea8

Documentation: AgentX guide

Key Information

  • Upgrade AgentX Manager to v1.5.0 before upgrading to v1.6.0 to prevent errors during upgrade.
  • After upgrading AgentX Manager to v1.6.0, upgrade AgentX Server to v1.6.0 to ensure that agents do not disconnect from distributed mode. 
  • In File integrity scanner or File Collection, use the short-name of files in the file path for files with commas in their names. See Known Issues for more details.
  • After upgrading to v1.6.0, refresh the browser to see the UI changes.
  • AgentX no longer provides active support and maintenance for AgentX Manager versions older than v1.4.6.

Enhancements

Description Issue ID Reference ID
Four new pre-configured templates are introduced:
  1. vendor_template_default_windows: Fetches Windows event log, file collection, file integrity scanner, and registry scanner.
  2. vendor_template_linux: Fetches Debian Linux’s file collection.
  3. vendor_template_minimal_windows: Fetches Windows event log and file collection logs.
  4. vendor_template_baseline_windows_workstation: Fetches Windows logs from the following sources:
    • Security
    • Application
    • System
    • PowerShell
    • Sysmon
    • Microsoft Defender
These templates are read-only but can be cloned and used in AgentX Manager to collect logs from Windows or Linux.
EDR-2869  
API calls made by AgentX Manager to check agent availability are optimized, reducing timeouts and improving performance. EDR-2909  

Bug Fixes

Description Issue ID Reference ID
Agent settings were redundantly updated every time AgentX configurations were changed, causing excessive disk usage, frequent timeouts, and performance delays. EDR-2624 #85987, #86546
In distributed mode, saving a default template without making changes caused the template settings to change, frequently restarting agents and stopping log collection. EDR-2688 #86386
Changes made to default templates were lost after upgrading AgentX Manager to v1.5.0, stopping log collection. EDR-2869,
EDR-1977
 

Upgrading AgentX Server to v1.5.0 caused agents to disconnect from distributed mode, stopping log collection.

EDR-2874

#89042, #88228

Creating a custom SSL certificate caused agents to be unassigned from their device groups temporarily, leading to log loss until they were reassigned. EDR-2806  

AgentX Manager v1.5.0

Release Date: January 28, 2025

Release Version: 1.5.0

Supported On: Logpoint v7.5.0 and Later 

Download: AgentX_1.5.0.pak

SHA256: 42bb4f469cdfebe837ec0f1c6d66782ef20933120ffa223ae4109139ff636c6f

Documentation: AgentX guide

Key Information

  • Don't change the Osquery path while installing AgentX Client as it causes a path not recognized error and interrupts installation. Go here to learn more about this issue. 
  • AgentX Client installation may occasionally pause and display a command prompt. In this case, press Enter to continue the installation.

Vulnerability Fixes:

The following vulnerabilities are fixed:

Description

Issue ID

Reference ID

CVE-2023-42463 - -
CVE-2023-50260 - -
CVE-2022-40497 - -
A vulnerability caused by limited access controls allowed li-admin users to access sensitive information about Logpoint deployment. EDR-2835 #85678

 

Bug Fix:

The following bug is fixed: 

Description

Issue ID

Reference ID

AgentX fails to collect Windows logs when wildcard patterns are used to match folder names in File Collection. EDR-2023 #83708

AgentX Manager v1.4.6

AgentX Manager is a security software component of AgentX responsible for managing and communicating with AgentX clients deployed across a network. It provides a centralized platform for monitoring and analyzing security events, enabling organizations to detect and respond to threats.

Release Date: October 30, 2024

Release Version: 1.4.6

Supported On: Logpoint v7.5.0 and Later 

Download: AgentX_1.4.6.pak

SHA256: cfc95e53cb366603faa770d3faacc90d8b12d5824510736d61adec02387beade

Documentation: AgentX guide

Key Information

  • AgentX Cluster can only be configured on a Distributed Logpoint set up using an IP address.
  • When using AgentX, keep the IP address as the Logpoint server alias in System Settings. Don’t modify it. If you do, an "AgentX server is down" error is triggered when adding a device in AgentX.
  • If there are multiple network interfaces, AgentX configuration is applied only to the primary interface. To implement the configuration on the secondary interface, your network administrator must configure it within your routing protocol.
  • Downgrading AgentX Server from v1.4.2 to v1.2.0 after installing AgentX Manager v1.4.6 may cause log loss and is not recommended. If a downgrade is necessary, contact support.
    If you are using AgentX in distributed mode, then upgrading it from previous versions to v1.4.6 will break the connection between all nodes in the distributed architecture, stopping log transmission across the entire setup. The workaround can be found here.
  • AgentX Manager v1.2.1 is not compatible with AgentX Server v1.4.2. Go to version compatibility matrix for more information.
  • When upgrading the AgentX Server, please note that the new version may take some time to reflect due to its file size exceeding 500MB.
  • The installation of Windows Installer v1.4.2 might take more than one minute.
  • Find the known issues for AgentX here.

Enhancement:

Description

Issue ID

Reference ID

AgentX v1.4.6 is now compatible with Logpoint v7.5.0. - -

 

Support:


If you have any questions or require assistance, create a support ticket.

Comments

Article is closed for comments.

Related articles

  • AgentX Server
  • Logpoint Agent Collector
  • Threat Intelligence
  • ChatGPT Integration
Was this article helpful?
0 out of 0 found this helpful
Privacy policy    EULA    Terms of service   
Copyright © , Logpoint. All rights reserved.

Note: We use cookies that are essential for the smooth functioning of our website.