search cancel

What events cause Last Update Time to refresh on Agent overview?


Article ID: 162207


Updated On:


Data Loss Prevention Data Loss Prevention Endpoint Prevent


This column can sometimes cause confusion if it is seen as a, "Agent Last Connected" time. But there are specific agent events that cause this column to be updated.


Events which cause the Last Update Time to refresh are

  • File system driver (vfsmfd) is up / down
  • DLP Plugin repair/tampered/installation failed
  • Troubleshooting task execution
  • Crash Dump status
  • Agent Configuration Updated

15.1 and later also adds these events that will trigger Last Update Time to refresh

  • An incident is generated
  • A Policy is updated*

*A policy must be directly updated, updates to user groups will not cause an update event.

For those interested in an "agent last checked in" field there is an open enhancement request; PM-2443.