Fleet
Every PC and server that reports to this organisation.
| Device | Type | Score | Agent | Rules | Last check-in | Open alerts |
|---|
No devices yet. Enrol one with the organisation's enrolment key.
Alerts
What the agents stopped or warned about. Only the rule, time and outcome leave a device.
| When | Severity | What happened | Device | Outcome |
|---|
No alerts.
Server incidents
Attacks the Server Agent detected and what Shield did at the Cloudflare edge.
| Started | Attack | Server | Peak / normal | Shield level | Ended |
|---|
No incidents.
Policies
Applied to every device at its next check-in.
Settings
Where alerts go, and the details used to pre-fill CERT-In reports.
Log export for your SIEM
Newline-delimited JSON of alerts and incidents. Your SIEM can pull the same data from /v1/console/export?since=<unix time> with the admin key.