The next step is to create the Agent on the remote environment.
There are two ways to do this:

Edit Agent

You can double click on the agent to edit or use the following information.

  1. Agent name
  2. Environment
  3. Publisher


  1. A unique identifier is generated automatically for each agent.
  2. A download link to install the Agent on the remote site will be created for each customer and you can copy and send it to them (or use the Send Email invite in the main screen). This link as well as the Send email invite is for backup only in case the remote installation / remote docker procedures have issues.


  • Make sure you configure the Email integration in the Marketplace to allow sending emails

Agent Status Options:

Waiting for Agent: Only displays if it is a new agent and it has been enabled in the Update Agent screen.
Live: There is full communication from Agent to Publisher and from Chronicle SOAR to Publisher in last X minutes (where X is taken from Publisher configuration)
Error: There was a problem with the communication from Agent to Publisher or from Chronicle SOAR to Publisher in last X minutes (where X is taken from Publisher configuration)
Disabled: Will display if the agent is disabled