Once hosts are added to Sandfly, you can see a listing of them under the host view screen. Sandfly will show you the first time this host was seen (e.g. when it was added), the last time it was seen, the last IP address it was using, and other details about authentication status, credentials used, host_id, etc.
Below you can see a list of active hosts and inactive hosts. Active hosts are those that Sandfly was able to successfully authenticate to and inventory. Inactive hosts are those that had a problem authenticating or were unreachable for other reasons.
Sandfly Host Listing
Viewing Hosts Details
You can see details about the host by simply clicking on it. A break out of the details will appear like below:
Sandfly Host Details
Raw data about the host will have many more details in JSON format. You scan see this data by selecting the Raw Host Data tab.
Sandfly Raw Host Data View
Viewing Inactive Hosts
Hosts that could not be logged into for whatever reason, will show up with a circle-backslash icon in the Active column and the data in their will appear greyed out. The Auth Status column will tell you why the host could not be added to Sandfly.
Sandfly Inactive Hosts
Host View Top Bar
The top bar for the host view contains Filters, Columns, Export and Presets buttons. These buttons give you the ability to quickly narrow down your search on large host sets and get additional information.
Host View Top Bar
Host Filter
The Filter option allows you to quickly build filters to narrow down the hosts in the view. You can for instance build a filter for active hosts that are running Ubuntu by combining options like the example below. You can combine other parameters as you require.
Filtering down to Ubuntu hosts
Column Selector
Hosts have many columns you can select depending on your preference. Simply toggle what you want to see in the host view.
Host column selection
Export
You can select hosts and export the columns in CSV or Print formats with the Export button. Visible column data will be exported and downloaded to your browser.
Presets
Presets have common options to use with a filter. In the Host View, the presets allow you to quickly see all active hosts or all inactive hosts. This can be used to quickly purge the system of systems that are not responding. The preset button when clicked will show the below options.
Active and Inactive Presets
Deleting Hosts
Hosts that are inactive or you do not want monitored any longer should be deleted. All hosts in the system count towards your active license total so keeping inactive hosts is wasteful.
Below we used a filter preset to select all hosts. Then we selected them all.
Selecting Inactive Hosts
To delete hosts, simply go to the Bulk Actions button and select Delete.
WARNING: Inactive Hosts Consume License Keys! Having inactive hosts still counts towards your total license number. So for instance if you have a license for 1000 systems and you have 500 active and 500 inactive hosts, then your have reached your license total. You should delete the 500 inactive hosts to free up slots for legitimate systems you want monitored.
Previous Article: | Next Article: | ![]() |