Use the fleet overview
Use the overview’s fleet summaries and ranked queues to decide which device or alert to investigate next.
Before you start
- Select the organization you want to inspect.
- Enroll at least one device to populate fleet measurements.
Screenshots show the Rapport interface with example data. Use your organization’s devices and values. Select an image to view it at full size.
Check the organization and snapshot time
Select Overview in the sidebar. Confirm the organization in the top bar and the snapshot time under the page title. The page refreshes every 30 seconds while available; click Refresh for a new snapshot now.
What you should see: The timestamp advances after a successful refresh.
Open the right fleet summary
Use the action link in a card to inspect the underlying records. The small counts beneath the main number explain what it includes.
| Field or control | What to do |
|---|---|
| Devices reporting online | Shows online devices against the enrolled total. Click online, degraded, offline, or agentless for an inventory filtered to that state; Inspect fleet opens the full inventory. |
| Active alerts | Shows active alerts, including older unresolved records. Review active alerts opens their queue. |
| Average DEX | Shows the average for devices with a complete score in the current scoring model. Investigate experience opens the score breakdown and trends. |
| Average patch compliance | Shows the average among devices with a reported patch measurement. Review patches opens Patch Management. |
Work the Devices needing attention queue
Read the reason badges, last heartbeat, DEX, patch measurement, and critical alert count beside a device. Click its hostname or Investigate to open the device record. The queue considers heartbeat delay, score and patch shortfalls, and critical alerts.
- Use Previous device attention and Next device attention when the queue spans pages.
- Operators can use View thresholds to inspect the organization settings; owners see Configure thresholds.
- A device without a complete score or recent heartbeat needs investigation before you rely on its summary.
What you should see: The selected endpoint opens with its identity and detailed observations.
Work the Active alert queue
The queue puts critical alerts first, followed by the oldest within a severity. Click Review alert to open that exact alert, including alerts older than the normal time filter. Use Open alert management to see the broader active queue.
What you should see: Alerts opens with the relevant record selected, where you can inspect its condition and available actions.
Move to trends, analysis, approvals, or operations
Use the shortcuts above the summary cards: Experience trends, Specialized analysis, Review approvals, or Operations. Each destination provides its own filters and observation period. Use the destination’s controls to select the scope for the next task.
If something doesn’t work
Overview says No endpoints yet
Check the organization selector. If this is the intended organization, click Install agent and enroll a device. An organization with no enrolled devices has no fleet measurements to display.
The fleet snapshot is unavailable or stale
Reconnect if offline, then select Retry or Refresh. The saved timestamp shows the age of the currently displayed information.
A card’s denominator is smaller than the total fleet
Read the coverage beneath the value. DEX and patch averages include devices with the relevant measurements; they can have different denominators.