Environment
- EDR: All supported versions
- Hosted EDR: All Versions
Question
How does EDR calculate Host Uptime and Sensor Uptime?
Answer
Sensor Uptime
- Sensor Uptime is updated by OS API when the sensor checks in. The value is not necessarily cleared when the sensor goes offline.
- So it is a representation of the information known about the uptime of the endpoint at the last point in time when the sensor was online and connected to the console.
- This is not information that is collected and uploaded to the console independent of the sensors online status.
- A machine that is "offline" and unable to communicate with the primary node will not update the "uptime" information in the console.
Host Uptime
- EDR pulls uptime from OS API.
Related Content
