Endpoint Vital

An endpoint vital is a custom check that runs a command on your endpoints and compares the output against what you expect. Use it to confirm a setting, service, or condition across the fleet, and optionally raise an alert when the check fails.

Availability

Endpoint Vital is available on EndpointOps editions and above. If you don't see it in the menu, your license doesn't include it.

How to get here

You reach this page through Settings, so you need administrator (settings) permission. If you don't see the Settings icon, ask your administrator for access.

1. Sign in to EndpointOps.
2. In the top-right of any screen, click the Settings (gear ⚙️) icon.
3. In the Settings menu on the left, open Policy Management and click Endpoint Vital.

Navigate to: Settings → Policy Management → Endpoint Vital

URL path: /settings/policy-management/quick-check-toolbar

The Endpoint Vital screen

Columns: Name, Severity, Scope, Raise Alert, Status, Description, Created At. The Status column is a switch you can flip in the list. Each row has edit (✏️) and delete (🗑️) actions.

The toolbar

Above the list, the same toolbar appears on every list screen:

• Create- add a new item (opens a form panel from the right).
• Refresh- reload the latest data.
• Export- download the current list.
• Columns- choose which columns to show (covered under "Choosing which columns to show" below).

Working with the list

These controls behave the same on every list:

• Search- type in the Search… box above the table to filter rows as you type.
• Sort- click the arrows in a column header to sort by that column.
• View details- click a row's link in the first column to open a read-only view.
• Edit / delete- use the edit (✏️) and delete (🗑️) icons at the end of a row.
• Pagination- when a list runs to more than one page, use the page controls at the bottom-right and the / page selector to change how many rows show.
• Permissions- you only see Create, edit, and delete if your role grants the matching permission; otherwise the screen is read-only.

When you save a new or edited record, a success message appears, the panel closes, and the list refreshes. Required fields are marked with a red asterisk.

How do I create an endpoint vital?

1. Click Create. The form panel opens.

   

2. Fill in the fields (red asterisk = required):

   Field	Required	Notes
   Name	Yes	A label for the check.
   Description	Yes	What it checks.
   Severity	Yes	The severity if it fails.
   Raise Alert	-	Raise an alert on failure. Turning it on adds Add Actions and Add Remediations.
   Enabled	-	Turn the check on or off (on by default).
   Scope	-	Which endpoints it runs on.
   Command Type	Yes	CMD or PowerShell.
   Command	Yes	The command to run. The AI Script Generator can draft one for you.
   Expected Output	-	Conditions the command's output must meet (Attribute → Condition → Value).

3. Use Test to try the command before saving, then click Create.

Generate and test the command

Use the AI Script Generator to draft the command from a plain-English description, and Test it against a sample endpoint before you save.

The command runs on real endpoints

A Command here executes with the agent's privileges on every endpoint in Scope. A check is meant to read state, but CMD/PowerShell can also change or damage a machine. Always Test against one endpoint first, and read any AI Script Generator output line by line before saving- don't deploy a command you don't fully understand. Keep the Scope as narrow as the check allows.

Choosing which columns to show

Click the Columns icon on the right of the toolbar to open the column picker.

Tick the columns to show, untick to hide, drag to reorder, then click Apply.

Related

• Alert Configurations- attribute-based alert rules.
• Inventory Drift- alert on inventory changes.