View Endpoints Monitored

The Endpoints Monitored graph shows the unique endpoints seen over a given period of time. A unique endpoint is defined by having a unique sensor ID.

Select a preset time range to view and modify the graph:

• 1 week

• 1 month

• 3 months

• 6 months

How endpoints are counted

The graph shows the unique number of endpoints Red Canary has observed for the given time frame. The graph is updated approximately once an hour, with the last update time noted at bottom-left of the graph.

• The number at top-left represents the total unique number of endpoints Red Canary has observed for the selected time frame.

• Each data point on the graph for each day represents the unique number of endpoints that were monitored for that specific day.

Endpoints Monitored graph vs. Endpoints page

This graph counts unique endpoints based on when telemetry was generated, as opposed to when Red Canary last saw telemetry. As a result, counts shown on the Endpoints Monitored graph will not exactly match with the counts shown on the Endpoints page, which references the last time Red Canary saw telemetry. This timestamp is known as Last Activity Time.

Percentage change

The percentage shown is the change observed from the previous to the currently selected time frame.

For example, If we say today is Monday (09/16) , then it means Red Canary has observed 513 endpoints since the previous Monday (09/09). Since the change is +48%, that means Red Canary observed 347 endpoints from 09/02 => 09/09. The percentage monitored increased by 48% from last week.

In the above example, the graph shows a -33% decrease over the last 7 days. This decrease means Red Canary has observed 33% fewer endpoints compared to the previous time period. Assuming today is 09/16, this means, since 09/09, Red Canary has observed 108 unique endpoints. This is down 33% from the previous period of 09/02 => 09/09, where we observed ~160 endpoints.

Endpoints not sending telemetry badge

This is the count of endpoints that were previously online, but are no longer. We determine this count by looking at how many endpoints were online at least 72 hours ago, but have been offline in the last 24 hours.

You can also click Endpoints at the bottom-right of the graph to navigate to the relevant page to filter endpoints.