Actions overview
On the Actions page in the History area, you can view details for the request the action belongs to.
To view an action's request details
- Log in to the Secure Endpoint Console as a user with the View permission for the action.
- On the navigation bar, click
History > Actions. - To find a specific action, edit the filters.
- Click the background of the action.
The request overview opens. The following information is available:
Device identifier header
- Device name
- Absolute Identifier The unique Electronic Serial Number (ESN) assigned to the Secure Endpoint Agent that is installed on a device. | Serial number The identification number assigned to the device by the device manufacturer. For Windows devices, this value may correspond to the serial number of the BIOS, the motherboard, or the chassis, depending on the manufacturer.
- Username Username of the user who was logged in to the device when an agent connection occurred. If no user was logged in during the most recent agent connection, the last detected username shows. If you are viewing a report and want to see if a user was logged in during the most recent connection, add the Current Username column to the report. If no user was logged in at the time of the connection, "No Data" or two em dashes (— —) show in the column. | Policy group A collection of devices to which a set of policies are applied.
- Encryption status The detected status of a Windows or Mac device with respect to the installation of a full-disk encryption product. Possible values are: Encrypted, Used Space Encrypted, Not Encrypted, Suspended, Encryption In Progress, Decryption in Progress, Not Detected and No Data.
-
Last connected The date and time when a device's component manager last connected to the Absolute Monitoring Center. For online devices, the component manager connects every 15 minutes. Also see component manager (CTES). (as a relative date, such as 23 days ago)
Hover over the relative date to view the exact date and time in a tooltip.
-
View Device button
To view the device's Device Details page, click View Device.
Request header
Request name: The default or user-defined name of the request
Request creation details: The date and time the request was created and the user or Action rule that created the request
Overview and Configuration details
Each request contains a collapsible Overview and Configuration section.
The overview section for each request contains the Request ID, which is the system-defined identifier of the request
The following tables show the additional information that may be included in the overview and configuration sections depending on the options selected in the request:
| Item | Description |
|---|---|
| Overview | |
| Description |
User-defined description of the request (if it was added when the request was created) |
| Wipe type |
The data sanitization process used
|
| Result |
A link to the Certificate of Sanitization Click |
| Configuration | |
| Unenroll devices and free licenses |
Shows if the Cryptographic Wipe request was set to unenroll Windows devices on completion |
| Item | Description |
|---|---|
| Overview | |
| Description |
User-defined description of the request (if it was added when the request was created) |
| File name, folder and path |
Only applies to Delete File requests The files and folders entered in the Delete Files request |
| Result |
Found n – Deleted m: the number of files found on the device (n) and the number of files deleted (m) If the number of files found is different than the number of files deleted, see the log file for detailed information. (Delete All Files) Click Click File Date Attributes are not included in the log file for Delete All Files. |
| Configuration | |
| Overwrite the data x times | The number of times the data was overwritten |
| Include File Date Attributes in the log file |
Only applies to Delete File requests An indication of whether Include File Date Attributes in the log file was selected in the Delete Files request |
| Disable the Windows OS |
Only applies to Delete All Files requests An indication of whether Disable the Windows OS was selected in the Delete All Files request |
| Unenroll devices after the File Delete is complete |
Only applies to Delete All Files requests An indication of whether Unenroll devices after the Wipe is complete was selected in the Delete All Files request |
| Item | Description |
|---|---|
| Overview | |
| Description |
User-defined description of the request (if it was added when the request was created) |
| Freeze type |
The type of Freeze
|
| Scheduled date |
The date and time the device is scheduled to be frozen Only shows when On or after a certain date was selected in the Freeze request |
| Unfreeze code |
The code that's entered directly on each frozen device to unfreeze it and make the device operational again For security reasons, the unfreeze code is masked. To show it, click |
| Configuration | |
| Message |
The name of the Freeze message and a preview of the message the users see on their device when it's frozen Click |
| Send status updates | Status updates trigger an email notification for this request |
| Events |
The events that trigger an email notification Only shows if Send status updates was selected in the request |
| Send email |
The email addresses that receive the notification Only shows if Send status updates was selected in the request |
(
(
(| Item | Description |
|---|---|
| Overview | |
| Description |
User-defined description of the request (if it was added when the request was created) |
| Configuration | |
| Unfreeze devices and cancel pending on-demand freeze requests |
Indicates that the Remove Freeze request:
|
| Cancel pending and downloaded freeze requests scheduled for a future date | Indicates that the Remove Freeze request cancels Scheduled Freeze requests with a status of Pending or Ready |
| Send status updates | Indicates that status updates trigger an email notification for this request |
| Events |
The events that trigger an email notification Only shows if Send status updates was selected in the request |
| Send email |
The email addresses that receive the notification Only shows if Send status updates was selected in the request |
| Item | Description |
|---|---|
| Overview | |
| Name |
The system-defined name of the request Click |
| Configuration | |
|
If a variable was used in a configuration in the request, it is displayed as such in this area. |
|
| Recovery > BitLocker Recovery key | The device's BitLocker recovery key |
| File operations (add or delete) playbook | |
|
Delete file > Path and file name to delete |
The file path of the file requested to delete |
|
Add file > File path |
The location on the device where the file is stored |
|
Add file > Host file URL |
The URL where the file was downloaded from |
| Set/remove registry keys playbook | |
|
Set registry key > Registry name, value, and path |
Details about the registry key that was added, or the registry key value that was updated |
|
Remove registry key > Registry name, value, and path |
Details about the registry key value that was removed |
| Restore from image playbook | |
|
Restore > Manifest file URL |
The URL where the manifest file was stored |
|
Restore > Username |
The username used to access the server |
|
Restore > Credentials |
The password or key associated with the username |
| Run script playbook | |
|
Batch script |
Click  to view the script content |
| Item | Description |
|---|---|
| Overview | |
| Description |
User-defined description of the request (if it was added when the request was created) |
| Script name |
The name of the script Click
If the request was run on Windows and Mac devices, the script contains both a PowerShell Script and Bash Script tab. |
| Return code | For actions with an action status of Completed, the return code from the script |
There is currently no configuration section for Run Script.
| Item | Description |
|---|---|
| Overview | |
| Description |
User-defined description of the request (if it was added when the request was created) |
| Message response |
The message response A semi-colon (;) delimited list of Field Names and values for the Custom Device Fields included in the response to the message Format: Field Name 1: value 1; Field Name 2: value 2 Shows No Data when:
|
| Configuration | |
| Scheduled date |
The date and time the message is scheduled for Only shows when On or after a certain date was selected in the Send Message request |
| Message |
The name of the End User Message and a preview of the message Click The name of the End User Message wasn't recorded prior to Secure Endpoint 9.0 (April 2024). Requests created prior to Secure Endpoint 9.0 show No data as the message name but still contain a preview of the message. |
| Display |
How the message is displayed
|
| Frequency | The number of times a participant is allowed to snooze the message |
| Item | Description |
|---|---|
| Overview | |
| Description |
User-defined description of the request (if it was added when the request was created) |
| Configuration | |
| Exclude missing devices | Exclude missing devices was selected in the Unenroll request |
