Network and Process Collector (agent-collector-server-netstat-process)

This collector collects process details and process-level network associations from Windows and Linux servers. This collector can run only on Windows.

The collector uses the Windows Remote Management (WinRM) protocol to communicate with Windows servers. The target Windows servers must have the WinRM service enabled and the following ports enabled on the firewall:

Port 5985 (HTTP-based, applicable to non-encrypted scenarios)
Port 5986 (HTTPS-based, applicable to encrypted scenarios)

The collector collects process details and network connections identified using netstat on the target node.
The internal network relationships of containers, as well as the actual forwarding relationships handled by Nginx or load balancers, cannot be collected.
To improve collection stability and ensure consistent results, you are advised to use nodes' private IP addresses for collection. Using public IP addresses may increase the risk of collection failures or result in data inconsistencies.

**Table 1** Parameters for configuring the network and process collector
Parameter	Mandatory	Configuration
process_only	No	Specify whether to collect only process information. The options are true and false. true indicates that only process information is collected. false indicates that process and network information is collected. The default value is false.
duration	No	Specify the collection duration. If the duration exceeds the defined limit, the collection stops. The unit can be m (minute), h (hour), or d (day). The value is an integer greater than or equal to 1. The unit must be specified. If this parameter is not set, the default value 1m is used.
interval	No	Specify the collection interval, in minutes. The value is an integer ranging from 1 to 30. If this parameter is not set, the default value 1m is used.
output_path	No	Enter the path for storing the output file. For example, C:\MgC-Agent\test. The default path is C:\MgC-Agent\data\collection-result\agent-collector-server-netstat-process.

Related Operations

If a collection task fails, you can perform the following operations to obtain the existing collection records:

In the task list, click the drop-down arrow to obtain the data source ID of the task. If the data source ID is not found, submit a service ticket to contact technical support for fault locating and rectification.
Locate the failed task and click View Storage Path in the Operation column to obtain the XLSX or JSON file path.
Navigate to the MgC Agent installation directory and go to the path of the obtained XLSX or JSON file. In the path, search for the XLSX or JSON file with the same name as the obtained data source ID. If the XLSX or JSON file is not found, the collection was not completed. In this case, you are advised to create a collection task again.