EDR Server: Automatically Filter Inactive Sensors from the User Interface (7.2 and Above)

[#1]

Environment

• EDR Server: 7.2.0 and Above

Objective

Filter out inactive sensors that haven't checked in for a certain amount of time

Resolution

1. Log into the EDR Console
2. Go to the Sensors page
3. Select the "Sensor Display Settings" button
4. Change the value to the maximum number of days sensors should be visible after going offline

Additional Notes

• Ensure the SensorLookupInactiveFilterDays value established matches the data retention period configured for the environment
• When an inactive sensor is filtered, any remaining associated event data for that sensor will no longer be accessible via the user interface

Related Content

EDR Server: Automatically Filter Inactive Sensors from the User Interface (7.1.1 and below)
CB Response Cloud: How to Filter Out Inactive Sensors Using the UI Filters
EDR: How long are inactive sensors retained in the console?