Endpoints
The Endpoints page (Agents > Endpoints) is the central hub for managing all enrolled agents. Every Windows and Linux endpoint running the TridentStack Control agent appears here, giving you a single view of your entire fleet.
Endpoint list
Data table
The endpoint list is a full-featured data table with sortable columns, search, and filtering. Available columns include:
| Column | Description |
|---|---|
| Status | Current connection state (Online, Offline, Onboarding) |
| Hostname | The endpoint's computer name |
| IP Address | Last reported internal IP address |
| Operating System | OS name (e.g., Windows Server 2022, Ubuntu 24.04) |
| Agent Version | Installed TridentStack Control agent version |
| Current User | Currently logged-in user on the endpoint |
| Tags | Assigned tag labels |
| Uptime | Time since the endpoint was last restarted |
| Last Check-in | Timestamp of the most recent heartbeat |
| Registered | When the agent first enrolled |
| System Updates | Count of pending system updates |
| App Updates | Count of pending application updates |
| OS Build | Operating system build number |
| Platform | Endpoint platform (Windows, Linux) |
| Health Score | Calculated health metric based on patch status and compliance |
| Vulnerabilities | Total number of detected CVEs |
| Critical Vulns | Count of critical-severity CVEs |
| High Vulns | Count of high-severity CVEs |
| Medium Vulns | Count of medium-severity CVEs |
| Low Vulns | Count of low-severity CVEs |
| Disk Free | Available disk space on the system drive |
Column customization
Click the column manager dropdown in the toolbar to show or hide columns, reorder them by dragging, or reset to the default layout. Column widths can be adjusted by dragging the border between column headers.
Status indicators
Each endpoint displays one of the following status indicators:
- Online (green) - Agent is connected and actively reporting
- Offline (gray) - Agent has not checked in recently
- Onboarding (yellow) - Agent has registered but has not yet completed its first telemetry refresh
Expanded row details
Click any row in the table to expand it and see detailed system information without leaving the list view. The expanded section includes:
- OS details - Full operating system name, version, and build number
- Hardware specs - CPU, memory, and disk information
- Agent version - Currently installed agent version
- Assigned tags - All tags applied to the endpoint
- Pending updates - Count and summary of updates awaiting installation
Search and filter
Use the search bar at the top of the table to filter endpoints by hostname, IP address, or other text fields. Results update as you type.
Active filters
When filters are applied, they appear as tagged pills in the filter bar below the toolbar. Each filter shows its field and value, and can be removed individually by clicking the X button. A Clear All button removes all active filters at once.
Quick filtering from expanded rows
When you expand an endpoint row, each field in the detail panel displays + and - filter buttons:
- + (include) filters the table to show only endpoints matching that value (for example, clicking + next to an OS version shows only endpoints running that version)
- - (exclude) filters the table to hide endpoints matching that value
This lets you quickly drill into or exclude groups of endpoints without manually constructing filters.
Combine search with column sorting to quickly find problem endpoints. For example, sort by "System Updates" descending and search for a specific tag to find the most out-of-date machines in a group.
Bulk actions
Select multiple agents using the checkboxes on the left side of the table. Once you have a selection, the bulk action bar appears with the following options:
- Restart agents - Send a restart command to all selected endpoints
- Install pending updates - Trigger immediate installation of approved updates
- Assign tags - Add one or more tags to the selected endpoints
- Remove tags - Remove a specific tag from the selected endpoints
Bulk actions are dispatched to agents immediately over the persistent gRPC connection. Online agents begin processing the command right away. Offline agents will receive the command when they reconnect.
Agent detail page
Click an agent's hostname in the endpoint list to navigate to the full agent detail page. This dedicated view combines always-visible summary sections with tabbed detail views, providing complete visibility into a single endpoint.
Page layout
The agent detail page is divided into sections that are always visible regardless of which tab is selected, followed by a tab bar for deeper views.
Header
The top bar displays the agent's hostname, status badge (Online, Offline, Onboarding), agent ID, and any assigned tags. If the agent replaced a previously retired endpoint (same hardware re-enrolled), a "Replaced Retired Endpoint" badge links to the retired record's history.
An Actions dropdown menu provides:
- Manage Tags - Add or remove tags from this agent
- Install System Updates - Trigger installation of all approved pending system updates
- Install Application Updates - Trigger installation of all approved pending application updates (Windows only)
- Install Office Updates - Update Microsoft Office if an update is available (Windows only, appears only when Office is installed)
- Push Policies - Push all assigned configuration policies to the agent
- Restart Agent - Send a restart command to the agent service
- Request Restart - Request a system restart (when a reboot is pending after updates)
- Collect Logs - Trigger agent log collection for troubleshooting
- Retire Endpoint - Retire this agent record
Status bar
Below the header, a status bar shows key metrics at a glance:
- System - Count of pending system updates with last check time
- Applications - Count of pending application updates with last check time (Windows only)
- Heartbeat - Timestamp of the most recent heartbeat
- Uptime - Time since the endpoint was last restarted
- Disk - Free disk space on the system drive with a color indicator (green, yellow, or red based on usage)
- Registered - When the agent first enrolled
A Live indicator shows that the page auto-refreshes every few seconds.
System Information
An always-visible panel organized into five columns:
| Column | Fields |
|---|---|
| Agent Identity | Hostname, Status, Agent Version, Current User, Directory Join Status |
| Activity & Network | Last Check-in, Registered, External IP, Internal IP |
| System | Operating System, OS Build, Architecture, System Model |
| Update Policies | Assigned system update policy and application update policy with their target tags |
| Configuration Policies | Assigned configuration policies with their target tags |
Hardware Details
A collapsible section (collapsed by default) showing detailed hardware information: CPU model, core count, clock speed and cache sizes, memory modules with capacity and speed, disk partitions with usage, baseboard details, and hardware UUID.
Pending Updates
Always visible above the tab bar. Displays pending updates in two side-by-side panels:
- Pending System Updates (left) - Approved system updates awaiting installation. Shows KB number, title, severity, estimated install time, Install Stats, and scheduled deployment time. A count badge shows the total. Right-click any update to trigger installation.
- Pending Application Updates (right) - Third-party application updates with the app name, installed version, target version, Install Stats, and scheduled deployment time (Windows only).
- Pending Linux Updates (Linux agents) - Package updates with name, current and available versions, Install Stats, and estimated install time.
The Install Stats column shows fleet-wide installation success metrics (deployment count and success rate). Hover or click for details including confidence level and common errors. See System Updates - Install Stats for more information.
Each panel has its own refresh button and shows the time since the last check.
Tabs
Below the always-visible sections, the tab bar provides access to detailed views:
| Tab | Description |
|---|---|
| Health | Overall health score with vulnerability, compliance, update, and network dimensions |
| System State | OS details, installed updates/packages, endpoint protection, and Windows Defender status |
| Software Inventory | All installed software with version and update status |
| Vulnerabilities | CVEs detected on this endpoint with severity and remediation options |
| Network | Listening ports, firewall state, and exposure assessment |
| Compliance | Compliance framework scores and per-control evaluation results |
| Effective Policy | Resolved policy settings from all sources with conflict detection (Windows only) |
| History | Chronological log of all operations, tasks, and telemetry events |