blumira-agents

# Blumira Agents & Devices ## Overview Blumira agents (sensors) are deployed on devices to collect log data and detect threats. This skill covers device inventory management, agent health monitoring, and agent key management for deployments. ## Key Concepts ### Devices Devices represent endpoints, servers, or network appliances with Blumira agents installed. Each device record includes agent status, last seen time, OS information, and network details. ### Agent Keys Agent keys are deployment tokens used to register new agents with your Blumira organization. Keys can be scoped and rotated as needed. ## API Patterns ### List Devices ``` blumira_agents_devices_list page_size=50 order_by=-last_seen ``` Filter examples: ``` blumira_agents_devices_list os.contains=Windows status.eq=active ``` ### Get Device Details ``` blumira_agents_devices_get device_id=<UUID> ``` ### List Agent Keys ``` blumira_agents_keys_list ``` ### Get Agent Key Details ``` blumira_agents_keys_get key_id=<UUID> ``` ## Common Workflows ### Agent Health Check 1. `blumira_agents_devices_list` with `order_by=last_seen` to find stale agents 2. Identify devices that haven't checked in recently 3. Cross-reference with user/admin to determine if device is offline or agent needs attention 4. Document findings for remediation ### Device Inventory Audit 1. `blumira_agents_devices_list` with `page_size=100` to enumerate all devices 2. Page through results using pagination 3. Group by OS...