Endpoints
The Endpoints page (Agents > Endpoints) is the central hub for managing all enrolled agents. Every Windows, macOS, and Linux endpoint running the TridentStack Control agent appears here, giving you a single view of your entire fleet.
Endpoint list
Data table
The endpoint list is a full-featured data table with sortable columns, search, and filtering. Available columns include:
| Column | Description |
|---|---|
| Status | Current connection state (Online, Offline, Onboarding) |
| Hostname | The endpoint's computer name |
| IP Address | Last reported internal IP address |
| Operating System | OS name (e.g., Windows Server 2022, Ubuntu 24.04) |
| Agent Version | Installed TridentStack Control agent version |
| Current User | Currently logged-in user on the endpoint |
| Tags | Assigned tag labels |
| Uptime | Time since the endpoint was last restarted |
| Last Check-in | Timestamp of the most recent heartbeat |
| Registered | When the agent first enrolled |
| System Updates | Count of pending system updates |
| App Updates | Count of pending application updates |
| System Update Policy | The system update policy the endpoint effectively follows (resolved from its tags) |
| App Update Policy | The application update policies the endpoint effectively follows (resolved from its tags; an endpoint can inherit more than one, see Application Updates - Multiple policies per endpoint) |
| OS Build | Operating system build number |
| Platform | Endpoint platform (Windows, Linux) |
| Health Score | Calculated health metric based on patch status and compliance |
| Update Health | A per-endpoint readiness badge for update installs (Blocked, Action recommended, Healthy, or Unknown) |
| Vulnerabilities | Total number of detected CVEs |
| Critical Vulns | Count of critical-severity CVEs |
| High Vulns | Count of high-severity CVEs |
| Medium Vulns | Count of medium-severity CVEs |
| Low Vulns | Count of low-severity CVEs |
| Disk Free | Available disk space on the system drive |
Column customization
Click the column manager dropdown in the toolbar to show or hide columns, reorder them by dragging, or reset to the default layout. Column widths can be adjusted by dragging the border between column headers.
Update Health column
The Update Health column gives you a per-endpoint readiness badge that tells you, at a glance, whether an endpoint is ready to install updates or has an issue that needs attention first. It surfaces the same pre-flight readiness signal you see on an individual endpoint's System State view, brought up to the fleet level so you can scan your whole list at once.
Each endpoint shows one of these states:
- Blocked - A critical issue, such as low disk space, will cause update installs to fail until it is resolved.
- Action recommended - A warning worth addressing, though installs can still proceed.
- Restart pending - The only thing holding the endpoint back is a pending restart needed to finish applying updates. Restart the endpoint to clear it.
- Healthy - The endpoint passed its readiness checks and is ready for updates.
Endpoints with no readiness data yet show a dash (--) rather than a status. This is normal for macOS and Linux endpoints today, while their pre-flight checks are still being rolled out, and for any endpoint that has not reported yet. If a Windows endpoint that was previously reporting stops sending readiness data, it shows Unknown.
Add the column from the column manager dropdown. To find every endpoint in a given state, expand any endpoint row and use the include and exclude filter buttons next to its Update Health value (see Quick filtering from expanded rows below). For example, filter to Blocked to see only the endpoints where updates cannot install until you act.
The set of checks behind this badge is most comprehensive on Windows today, and is expanding to macOS and Linux endpoints (disk space and pending restarts).
Status indicators
Each endpoint displays one of the following status indicators:
- Online (green) - Agent is connected and actively reporting
- Offline (gray) - Agent has not checked in recently
- Onboarding (yellow) - Agent has registered but has not yet completed its first telemetry refresh
Expanded row details
Click any row in the table to expand it and see detailed system information without leaving the list view. The expanded section includes:
- OS details - Full operating system name, version, and build number
- Hardware specs - CPU, memory, and disk information
- Agent version - Currently installed agent version
- Assigned tags - All tags applied to the endpoint
- Pending updates - Count and summary of updates awaiting installation
Search and filter
Use the search bar at the top of the table to filter endpoints by hostname, IP address, current user, operating system, tag name, or assigned update policy name. Type part of any of these and the list narrows as you type.
Active filters
When filters are applied, they appear as tagged pills in the filter bar below the toolbar. Each filter shows its field and value, and can be removed individually by clicking the X button. A Clear All button removes all active filters at once.
Quick filtering from expanded rows
When you expand an endpoint row, each field in the detail panel displays + and - filter buttons:
- + (include) filters the table to show only endpoints matching that value (for example, clicking + next to an OS version shows only endpoints running that version)
- - (exclude) filters the table to hide endpoints matching that value
This lets you quickly drill into or exclude groups of endpoints without manually constructing filters.
Combine search with column sorting to quickly find problem endpoints. For example, sort by "System Updates" descending and search for a specific tag to find the most out-of-date machines in a group.
Bulk actions
Select multiple agents using the checkboxes on the left side of the table. Once you have a selection, the bulk action bar appears with the following options:
- Restart agents - Send a restart command to all selected endpoints
- Install pending updates - Trigger immediate installation of approved updates
- Assign tags - Add one or more tags to the selected endpoints
- Remove tags - Remove a specific tag from the selected endpoints
Bulk actions are dispatched to agents immediately over the persistent gRPC connection. Online agents begin processing the command right away. Offline agents will receive the command when they reconnect.
Agent detail page
Click an agent's hostname in the endpoint list to navigate to the full agent detail page. This dedicated view combines always-visible summary sections with tabbed detail views, providing complete visibility into a single endpoint.
Page layout
The agent detail page is divided into sections that are always visible regardless of which tab is selected, followed by a tab bar for deeper views.
Header
The top bar displays the agent's hostname, status badge (Online, Offline, Onboarding), agent ID, and any assigned tags. If the agent replaced a previously retired endpoint (same hardware re-enrolled), a "Replaced Retired Endpoint" badge links to the retired record's history.
An Actions dropdown menu provides:
- Manage Tags - Add or remove tags from this agent
- Install System Updates - Trigger installation of all approved pending system updates. Shows a "No Policy" indicator and is disabled when no system update policy is assigned, or "Disabled" when the assigned policy does not allow manual installation
- Install Application Updates - Trigger installation of all approved pending application updates (Windows and macOS). Shows a "No Policy" indicator and is disabled when no application update policy is assigned, or "Disabled" when none of the pending applications are covered by an assigned policy
- Install Office Updates - Update Microsoft Office if an update is available (Windows and macOS, appears only when Office is installed)
- Push Policies - Push all assigned configuration policies to the agent
- Restart Agent - Send a restart command to the agent service
- Request Restart - Request a system restart (when a reboot is pending after updates)
- Collect Logs - Trigger agent log collection for troubleshooting
- Retire Endpoint - Retire this agent record
Status bar
Below the header, a status bar shows key metrics at a glance:
- System - Count of pending system updates with last check time
- Applications - Count of pending application updates with last check time (Windows and macOS)
- Heartbeat - Timestamp of the most recent heartbeat
- Uptime - Time since the endpoint was last restarted
- Disk - Free disk space on the system drive with a color indicator (green, yellow, or red based on usage)
- Registered - When the agent first enrolled
A Live indicator shows that the page auto-refreshes every few seconds.
System Information
An always-visible panel organized into five columns:
| Column | Fields |
|---|---|
| Agent Identity | Hostname, Status, Agent Version, Current User, Directory Join Status |
| Activity & Network | Last Check-in, Registered, External IP, Internal IP |
| System | Operating System, OS Build, Architecture, System Model |
| Update Policies | Assigned system update policy and application update policy or policies with their target tags |
| Configuration Policies | Assigned configuration policies with their target tags |
Hardware Details
A collapsible section (collapsed by default) showing detailed hardware information: CPU model, core count, clock speed and cache sizes, memory modules with capacity and speed, disk partitions with usage, baseboard details, and hardware UUID.
Pending Updates
Always visible above the tab bar. Displays pending updates in two side-by-side panels:
- Pending System Updates (left) - Approved system updates awaiting installation. Shows KB number, title, severity, estimated install time, Install Stats, and scheduled deployment time. A count badge shows the total. Right-click any update to trigger installation.
- Pending Application Updates (right) - Third-party application updates with the app name, installed version, target version, Install Stats, and scheduled deployment time (Windows and macOS). Each row also shows the application update policy currently governing that application. When the endpoint inherits more than one policy for the same application, an info icon explains which policy won and why. An application not covered by any assigned policy is labeled "No Policy" (no application update policy assigned) or "Not in Policy" (the assigned policies do not cover that application) and cannot be installed manually until a policy covers it.
- Pending Linux Updates (Linux agents) - Package updates with name, current and available versions, Install Stats, and estimated install time.
The Install Stats column shows fleet-wide installation success metrics (deployment count and success rate). Hover or click for details including confidence level and common errors. See System Updates - Install Stats for more information.
Each panel has its own refresh button and shows the time since the last check.
Held-back system updates. If a system update repeatedly fails to install on an endpoint (for example, one Windows rejects while applying it during a restart), TridentStack Control stops attempting it automatically so it does not restart the endpoint over and over. The update stays listed as needed, and in the Pending System Updates panel its scheduled deployment column shows a Held back label instead of a deployment time. Select the label to read why the update was held back, and use the Retry button next to it, once you have resolved the underlying endpoint issue, to queue the update again for the next deployment window.
Tabs
Below the always-visible sections, the tab bar provides access to detailed views:
| Tab | Description |
|---|---|
| Health | Overall health score with vulnerability, compliance, update, and network dimensions |
| System State | OS details, installed updates/packages, endpoint protection, and Windows Defender status |
| Software Inventory | All installed software with version and update status |
| Vulnerabilities | CVEs detected on this endpoint with severity and remediation options |
| Network | Listening ports, firewall state, and exposure assessment |
| Compliance | Compliance framework scores and per-control evaluation results |
| Effective Policy | Resolved policy settings from all sources with conflict detection (Windows only) |
| History | Chronological log of all operations, tasks, and telemetry events |