01-09-2025 11:20 PM
Need help to create a xql query to detect the COnnection lost devices along with the reasons for connection lost.
01-15-2025 08:32 AM
Hi @S.Patil392541 ,
Thank you for writing to live community!
The reasons for connection lost can be many but a broadline logic is a continuous disconnection to the cloud for a default of more than 30days. The reasons are not exposed to the server and as a result, it is not possible to create XQL for these endpoints with reasons. These endpoints need a manual intervention to check for services and connectivity and/or other agent related reasons for validation.
Hope this helps.Please mark the response as "Accept as Solution" if it answers your query.
01-15-2025 08:32 AM
Hi @S.Patil392541 ,
Thank you for writing to live community!
The reasons for connection lost can be many but a broadline logic is a continuous disconnection to the cloud for a default of more than 30days. The reasons are not exposed to the server and as a result, it is not possible to create XQL for these endpoints with reasons. These endpoints need a manual intervention to check for services and connectivity and/or other agent related reasons for validation.
Hope this helps.Please mark the response as "Accept as Solution" if it answers your query.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
