Checking Content update version in endpoint(Cytool)

[MithunKT]

Hi All,

Can anyone let me know how to check the content update version at the endpoint level?

It is not visible in the agent console.

Can I make use of Cytool? If yes, what is the command to check?

Thanks!

Cortex XDR 

[eluis · Accepted solution]

Hi @MithunKT 

you can do it with 

cytool info

Please check the follow doc for this and other cytool options

https://docs.paloaltonetworks.com/cortex/cortex-xdr/7-7/cortex-xdr-agent-admin/cortex-xdr-agent-for-...

I hope this helps,
Luis

[neelrohit]

Hi @MithunKT ,

to be very specific, the command is:

cytool info query ,which shows the content version of the endpoint.

If it is not visible in the Cortex XDR console, it implies that the agent was never able to get the latest content version post installation and hence even the output of cytool info query would show you 0-0.

Request you to kindly check the reason for not having content(generally network connectivity) and ensure you have the latest content update fetched to the endpoint.