Within the Endpoints section of your Red Canary portal, you’ll see a list of servers and a list of endpoints that have not checked in within specified times. The intent of this display is to inform you quickly that there are machines within your environment for which you have no Red Canary coverage.

Occasionally, there are valid reasons why these endpoints are not checking in. In this case, you may remove them from the view by decommissioning (Decommission an endpoint that is no longer in service).

If you need a list of all the endpoints both healthy and unhealthy you can go to Endpoints and click the drop-down arrow to Download CSV. This will provide you with a historical record of all sensor registrations, decommissions, etc. that Red Canary has recorded. 

Did this answer your question?