Monitor Agent Upgrade Status - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM Administrator Guide

Product
Cortex XSIAM
Creation date
2024-07-16
Last date published
2024-12-12
Category
Administrator Guide
Abstract

From EndpointsAll Endpoints, you can view the upgrade status of any Cortex XDR agent that you manage.

From the Cortex XSIAM management console, you have full visibility into the XDR agent upgrade status on the endpoint. You can monitor the Cortex XDR agent statuses in EndpointsAll Endpoints. If the upgrade status fields are missing, add them. XDR agents report upgrade statuses as follows:

Status

Description

Last upgrade status

Displays the last upgrade status for each endpoint, and can be filtered by:

  • In Progress—This is the first stage shown when an upgrade is initiated (There is no Pending status).

  • Completed Successfully

  • Failed

  • No Upgrade—No upgrade of any type has been initiated for the endpoint. Newly installed endpoints will also show this status until an upgrade is initiated by one of the upgrade methods.

Last upgrade status time

Displays a timestamp for the last time the upgrade status changed for each endpoint. This column can be filtered by date and time.

Last upgrade failure reason

When relevant, displays the reason for an upgrade failure. This column can be filtered by free text.

Last upgrade source

Displays the source that initiated the last upgrade, and can be filtered by the following:

  • Manual Server Upgrade—The upgrade was manually initiated from the server.

  • Auto Upgrade—The endpoint was automatically upgraded according to the upgrade policy.

  • Local Manual Upgrade—The upgrade was manually initiated at the endpoint side.