What events cause Last Update Time to refresh on Agent overview?

Products

• Data Loss Prevention
• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention Enforce

Issue/Introduction

This column can sometimes cause confusion if it is seen as an "Agent Last Connected" time. But there are specific agent events that cause this column to be updated.

Resolution

Events that cause the Last Update Time to refresh are

• File system driver (vfsmfd) is up / down
• DLP Plugin repair/tampered/installation failed
• Troubleshooting task execution
• Crash Dump status
• Agent Configuration Updated
• An incident is generated
• A Policy is updated*

*A policy must be directly updated, updates to user groups will not cause an update event.

For those interested in an "agent last checked in" field there is an open enhancement request PM-2443.

Additional Information

You may want to review: Article ID: 170468 DLP Agent status not reporting as expected on Enforce