Navigating the Device details page

NAVIGATION  Organizations > select an organization > select a location > select a device

SECURITY   Datto EDR subscription with administrator or analyst-level platform access or Datto AV subscription with administrator or analyst-level platform access

BEFORE YOU BEGIN  The type of subscription you have may define the features available to you on this page. For a comprehensive overview of features available to Datto EDR and Datto AV customers, refer to Datto EDR and Datto AV access control.

The Device details page provides in-depth information about a selected endpoint, including monitoring information, performance metrics, and alert enumeration. It also provides basic device management options.

This article describes the page's layout and functions.

Overview

  1. In the top navigation menu, click Organizations.
  2. In the Organization column, click the desired organization.
  3. In the Locations section, click the applicable location.

  4. The Location details page is displayed. In the Devices section, click the applicable device.
  5. The Device details page is displayed.

    As you navigate the page, you'll see the features and fields described below.

Devices with an icon preceding their name are synced from Datto RMM. Learn more in our Understanding the Datto EDR + Datto RMM integration article.

Feature Definition
Delete

Deletes this device

IMPORTANT  If synced from Datto RMM, the device will repopulate until the monitoring agent is removed from the endpoint.
Rename

Renames the device
Move

Moves the device to another organization

NOTE   Devices synced from Datto RMM cannot be moved, renamed, or deleted from Datto EDR.

Field name Definition

Agent Version

The version of the Datto Endpoint Security agent installed on the endpoint

OS

Operating system installed on the endpoint

Type

 Indicates whether the endpoint is using an agent-based or agentless version of our monitoring software
IP address and hostname The current IP address and full hostname of the endpoint

Status
  • Active: Device is actively checking into the platform.
  • Inactive: Device has not been seen for more than 10 minutes.
  • Stale: Device has been offline for more than 30 days.
  • Updating: Device is attempting to auto-update the current agent build.
  • Update Failed: Device has not completed the update and is no longer actively checking in.
  • Disabled: The device is stuck in an update loop. The platform automatically disabled the agent for manual intervention.

IMPORTANT: Resolving agent activity and update issues

The following actions are recommended to resolve specific device status issues:

  • Inactive or Stale: First, check if the endpoint is still online and under active management. If it is, you could run Datto EDR Force Reinstall and Upgrade [WIN] from RMM to bring the device back online. If you are not integrated with an RMM, an alternative option would be to restart the Datto EDR aka HUNTAgent locally or run a powershell script.
  • Stuck in Pending Update or Update Failed state: Restart the Datto EDR aka HUNTAgent service. This should restart the attempt to update the agent. Also, you could attempt to reboot the machine.
  • Disabled: In the device list within your EDR portal, for the applicable device, click the ellipses menu () in the last column and select Enable. The device will go back and attempt to update the version to the latest agent build.

In the event you are unable to successfully resolve the issue, contact Kaseya Support. Be sure to note the status of the device and any troubleshooting you performed. Also, you can select Organizations > All Devices and for the applicable device, click the ellipses menu () in the last column, then select Fetch Logs. This will pull all current device and debug logs into the Reports section. The logs may be helpful to support when addressing the issue.

The System Metrics pane provides insights into storage and system usage on the endpoint.

Report title Definition

File Sizes

 Reports cache versus log size activity on the monitored endpoint
System Usage

Tracks overall CPU and memory usage on the endpoint against agent CPU and memory usage

The Cache Latency pane illustrates the monitoring agent's local database query times, in milliseconds, on the endpoint. You can switch between Simple and Advanced view modes for comprehensive information about the agent's performance.

View mode Definition

Simple

 Displays the maximum query time versus average query time
Advanced

Surfaces query times for each collection type; select from Artifacts, AutoStarts, Connections, Drivers, Memory, Modules, Processes, RTS Processes, RTS Memory, and Users to filter the information shown