Host Inventory - installed kbs - no entry

RFeyertag — Sat, 24 Sep 2022 19:21:31 GMT

Hello dear community,

I found some endpoints do not show any kbs entries. One of them is brand new, OK, so there must be an host_inventory run when the agent is running.

But what is with the other ones which are still running?

Ok, the other ones are divided into the above ones (server 2008 R2), but now I found another strange thing. The installed kbs are shown in the menu on the gui, but when I want to query them, this agent is not shown in the result.

Query:

What can I do to analyze why?

Rob

Re: Host Inventory - installed kbs - no entry

anlynch — Wed, 28 Sep 2022 14:36:55 GMT

@RFeyertag

Thank you for reaching out!

Host inventory scans endpoints every 24 hours. If your endpoint is recently added it may be the host inventory isn’t up to date. To ensure you’re able to get the most up to date information you may want to go to the Asset View and select ‘Run insights collection’.

Additionally, you also need to ensure that the below prerequisites have been met to retrieve the data you are looking for successfully.

You can find more information about host insights at the link below:

https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/endpoint-security/hardened-endpoint-security/host-inventory

topic Re: Host Inventory - installed kbs - no entry in Cortex XDR Discussions

Host Inventory - installed kbs - no entry

Re: Host Inventory - installed kbs - no entry