How to check cortex agent content update date on endpoint

Poornakumar — Mon, 06 Oct 2025 05:27:28 GMT

Hi Team,

Anyone has an idea how to check the content update date in endpoint please note not in the cortex management console i want to check the last content update date in endpoint.

Re: How to check cortex agent content update date on endpoint

nohash4u — Mon, 06 Oct 2025 20:11:02 GMT

Hello @Poornakumar,

This information is available within the tech support file that can be generated from the Cortex XDR agent running on the endpoint.

You will need a password from the Cortex XDR gateway / management console to access the content of the TSF.

There is more info on accessing the contents of the TSF here:

Support File Password

I was able to locate the relevant information from a trapsd.log file within the TSF folder (logs --> trapsd.log or logs --> trapsd.number_here.log).

Cheers.

topic Re: How to check cortex agent content update date on endpoint in Next-Generation Firewall Discussions

How to check cortex agent content update date on endpoint

Re: How to check cortex agent content update date on endpoint