Generate a Pattern allowlist

Generate an allowlist for a selection of patterns, to configure the patterns permitted to run on an agent.

Before you begin

Ensure that the following plugins are installed on your instance:

• Discovery (com.snc.discovery)
• Pattern Designer Enhancements (com.sn_itom_pde)

Role required: discovery_admin or agent_client_collector_admin

Procedure

1. Navigate to All > Pattern Designer > Patterns allowlist for ACC.

   The Pattern Allowlist Generator page appears.

2. Select the type of pattern selection in the Pattern Selection section.

   • All patterns: The allowlist generates for all patterns on the agent.

   • Specific patterns: The allowlist generates on the agent only for the patterns you select.

     After selecting this option, choose the patterns from which you want the allowlist to be generated.

3. Select Generate Allowlist.

4. Select Copy to copy the generated allow list.

5. Append the copied allowlist into the existing check-allow-list.json allow list on the agent.

   The patterns specified in the allowlist are permitted to run on the agent.

   Note: To generate allowlist for commands nested within EVAL() in a pattern step, ensure the Pattern Designer Enhancements plugin is v3.9.1 or above.

6. Define temporary variables for a pattern allowlist
   Define temporary variables by assigning values such as executable paths, config file paths, and so forth. Defining temporary variables ensures that runtime commands are successful.

Parent Topic:Deploying Agent Client Collector on endpoints