You can view details and an overview of all your endpoints.
The
→ page provides a central location from which you can view and manage the endpoints on which the agent is installed.To ensure the All Endpoints table is displaying the most useful list of endpoints, you can perform a one-time or periodic cleanup of duplicated entities of the same endpoint from the table. After the cleanup, duplicated entities are removed leaving only one endpoint entry - the last endpoint to connect with the server. Deleted endpoint data is retained for 90 days from the last connection timestamp. If a deleted endpoint reconnects, Cortex XDR recovers and redisplays the endpoint’s existing data.
Navigate to Periodic duplicate cleanup and select to either run one-time cleanup or define to run according to the Host Name, Host IP Address, and/or MAC Address fields every 6 hours, 12 hours, 1 day, or 7 days.
→ → → → . Enable theTo investigate a single endpoint, right click it, select Endpoint Data , and open the Asset view.
Manage Endpoints
The right-click pivot menu that is available for each endpoint displays the actions you can perform. The following table describes the list of actions you can perform on your endpoints.
Field | Action |
---|---|
Endpoint Control |
|
Security Operations | |
Endpoint Data |
|
View Endpoint Data
The following table describes both the default and additional optional fields that you can view in the All Endpoints table and lists. Clicking on a row in the All Endpoints table opens a detailed view of the endpoint.