The Intezer Protect sensor could be configured with a custom label that will be visible in the Intezer Protect console under the host details section. This custom label could be used in the Hosts Groups setting to create custom host groups.
In addition, it is possible to modify the label in the host page in the Intezer Protect console and via API.
Notice: A label provided via sensor configuration will be applied only if the host doesn’t have an existing label. If the label will be manually modified via the Intezer Protect console or API, the label provided via sensor configuration will be ignored.
Requirements
The minimum sensor version that supports this feature is 7.1.1.
In case you are configuring an already installed sensor, verify the sensor version in the host page in Intezer Protect console.
Instructions
Linux Machine or Container Host
Follow the instructions specified in Sensor Installation: Linux Machine or Container Host, and add the following command line argument to the installation command:
--label "<LABEL_VALUE>"
Replace the <LABEL_VALUE> placeholder with the desired label you wish to assign to the host.
Examples:
Machine With Direct Internet Access
wget -O - https://protect.intezer.com/v2/install?key=<SENSOR_LICENSE_KEY> | sudo sh -s -- --label "<LABEL_VALUE>"
Proxy Configuration
https_proxy=<PROXY_URL> wget -O - https://protect.intezer.com/v2/install?key=<SENSOR_LICENSE_KEY> | sudo sh -s -- --proxy-url "<PROXY_URL>" --label "<LABEL_VALUE>"
Proxy With Basic Auth
https_proxy=<PROXY_URL> wget --proxy-user=<PROXY_USER> --proxy-passwd=<PROXY_PASS> -O - https://protect.intezer.com/v2/install?key=<SENSOR_LICENSE_KEY> | sudo sh -s -- --proxy-url "<PROXY_URL>" --proxy-user "<PROXY_USER>" --proxy-pass "<PROXY_PASS>" --label "<LABEL_VALUE>"
DaemonSet Deployment
Follow the instructions specified in Sensor Installation: Kubernetes Cluster under the DaemonSet with Custom Configuration section.
Add the following configuration to the sensor-cfgConfigMap:
label: "<LABEL_VALUE>"
Replace the <LABEL_VALUE> placeholder with the desired label you wish to assign to the host.