Verifying EDR Activation using Command Line

Once you meet the EDR prerequisites, perform the steps to verify if the EDR is activated:

  • Run the following command to download the log files:
    grep -m1 EDR_SYSTEM_RT /var/log/qualys/qualys-cloud-agent.log*
  • Run the following command to verify EDR manifest is downloaded:
    ls -l /usr/local/qualys/cloud-agent/edr/manifests/code>
  • Run the following command to verify EDR data is generated by Agent:
    ls -l /var/spool/qualys/edr/ ls -ld /var/spool/qualys/edr/
  • Run the following command to verify if the Agent succesfully uploads the EDR data:
    grep upload /var/log/qualys/edr.log*| grep -v FIM