Tagging Agent

Agent tagging in GuardMode allows you to organize instances of the GuardMode Agent by tagging them under a shared "campus" value. Tags are added to every alert, both in provider notifications and logs.

In DPX notifications, the tags are displayed as labels. In Syslog notifications, they are added as prefixes to the messages in the following way:

[Tag=<tag1> Tag=<tag2>] <message>

Tag naming requirements

• Tags can include letters, numbers, dashes, and underscores

• All tags are normalized to lowercase.

• Each tag can be up to 250 alphanumeric characters.

Viewing Agent tags

Tip. GuardMode Agent tags can be managed using REST API or the CLI.

Viewing Agent tags using REST API

To view Agent Tags, send a GET request to /settings/tags.

Returns all agent tags

get

Authorizations

basic

AuthorizationstringRequired

Basic Authorization header

Header parameters

api-versionstringRequired

Responses

200

A list of all currently added tags

text/plainapplication/jsontext/json

idstring · uuidRequired

tagstring · min: 1Required

createdAtstring · date-timeRequired

get

/settings/tags

HTTPcURLJavaScriptPython

GET /settings/tags HTTP/1.1
Authorization: Basic username:password
api-version: text
Accept: */*

200

A list of all currently added tags

[
  {
    "id": "123e4567-e89b-12d3-a456-426614174000",
    "tag": "text",
    "createdAt": "2026-03-05T20:39:57.501Z"
  }
]

The response includes IDs for each tag. The collection is empty by default.

Viewing Agent tags using CLI

To view Agent Tags using the CLI:

cd /opt/catalogic/guard-mode/agent
./Catalogic.GuardMode.Agent config list tag

Adding tags

Adding tags using REST API

To add a tag to GuardMode Agent, send a POST request to /settings/tags:

Adds a new agent tag

post

Authorizations

basic

AuthorizationstringRequired

Basic Authorization header

Header parameters

api-versionstringRequired

Body

application/json-patch+jsonapplication/jsontext/jsonapplication/*+json

tagstring · min: 1 · max: 250Required

Responses

201

Tag was successfully added

text/plainapplication/jsontext/json

400

Bad request was sent

text/plainapplication/jsontext/json

409

Tag already exists and can't be added again

text/plainapplication/jsontext/json

post

/settings/tags

HTTPcURLJavaScriptPython

POST /settings/tags HTTP/1.1
Authorization: Basic username:password
api-version: text
Content-Type: application/json-patch+json
Accept: */*
Content-Length: 14

{
  "tag": "text"
}

application/json-patch+jsonapplication/jsontext/jsonapplication/*+json

{
  "id": "123e4567-e89b-12d3-a456-426614174000",
  "tag": "text",
  "createdAt": "2026-03-05T20:39:57.501Z"
}

You need to specify the tag name in the request body in the following way:

{
    "tag": "tag name"
}

Attention! Do not add the same tag twice.

Adding tags using CLI

To add a tag to GuardMode Agent using the CLI:

cd /opt/catalogic/guard-mode/agent
sudo ./Catalogic.GuardMode.Agent config add tag <name>

Removing tags

Removing tags using REST API

Delete a tag by sending a DELETE request to /settings/tags/{id}:

Removes an agent tag

delete

Authorizations

basic

AuthorizationstringRequired

Basic Authorization header

Path parameters

idstring · uuidRequired

Header parameters

api-versionstringRequired

Responses

204

Tag was removed

400

Bad request was sent

text/plainapplication/jsontext/json

delete

/settings/tags/{id}

HTTPcURLJavaScriptPython

DELETE /settings/tags/{id} HTTP/1.1
Authorization: Basic username:password
api-version: text
Accept: */*

No content

The tag ID can be obtained from the GET request response to the same endpoint.

Removing tags using CLI

To remove a tag to GuardMode Agent using the CLI:

cd /opt/catalogic/guard-mode/agent
sudo ./Catalogic.GuardMode.Agent config remove tag <tag_ID>