cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Who rated this post

L5 Sessionator

Hi @Piotr_Kowalczyk , thanks for reaching us using the Live Community.

 

Please try this XQL Query, add the fields as you need, and any other extra information thay you may require:

 

dataset = endpoints 
| filter endpoint_status = ENUM.CONNECTION_LOST 
| fields endpoint_name, ip_address, operating_system, agent_version, last_seen 

 

If this post answers your question, please mark it as the solution.

JM

View solution in original post

Who rated this post