Cb Response: What is the difference between 'Last Checkin' and 'Next Expected Checkin' estimated values?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

What is the difference between the Last Checkin and the Next Expected Checkin estimated values?

Environment

• Cb Response Console: All Versions

Resolution

• These values are explained in the User Guide available on the User Exchange: 
  • Last Checkin value: The date and time (GMT) of the last time the sensor checked into the Cb Response server. 
    Also, provides a time estimate of when the next checkin was expected (for example, 4 months ago for an offline sensor) 
  • Next Expected Checkin value: The date and time (GMT) of the next time the sensor is expected to check into the Cb Response server. Also,provides a time estimate of either when the next checkin is expected (for example, 21 seconds) or when the last checkin was expected (for example, for an offline sensor, about 4 months ago). 

Additional Information

• These are estimated values, so they are not necessarily going to be accurate.
• Only the 'Last Checkin' value is based on a real event and is timestamped to match.