topic Re: Checking Content update version in endpoint(Cytool) in Cortex XDR Discussions

Checking Content update version in endpoint(Cytool)

MithunKT — Tue, 16 Aug 2022 10:00:14 GMT

Hi All,

Can anyone let me know how to check the content update version at the endpoint level?

It is not visible in the agent console.

Can I make use of Cytool? If yes, what is the command to check?

Thanks!

Re: Checking Content update version in endpoint(Cytool)

eluis — Tue, 16 Aug 2022 11:09:21 GMT

Hi @MithunKT

you can do it with

cytool info

Please check the follow doc for this and other cytool options

https://docs.paloaltonetworks.com/cortex/cortex-xdr/7-7/cortex-xdr-agent-admin/cortex-xdr-agent-for-windows/troubleshoot-cortex-xdr-for-windows/cytool

I hope this helps,
Luis

Re: Checking Content update version in endpoint(Cytool)

neelrohit — Wed, 17 Aug 2022 07:30:37 GMT

Hi @MithunKT ,

to be very specific, the command is:

cytool info query ,which shows the content version of the endpoint.

If it is not visible in the Cortex XDR console, it implies that the agent was never able to get the latest content version post installation and hence even the output of cytool info query would show you 0-0.

Request you to kindly check the reason for not having content(generally network connectivity) and ensure you have the latest content update fetched to the endpoint.