Workspaces

Workspaces is a Portal tool designed to offer a complete and centralized view of the status and performance of an organization's devices.

Through an intuitive interface, it allows you to monitor key information from each device, access technical details, review alerts, operations, and sessions, as well as manage updates, services, and system components.

The main goal of Workspaces is to facilitate the administration and monitoring of appliances, optimizing decision-making through accurate, up-to-date, and visually organized data.

Device list

The main view displays all the organization's devices in a table. By default, the following columns are displayed:

• Name. Device Name.
• Status. Current status (Online or Offline).
• Last User. Name of the last user who accessed the appliance.
• CPU Cores. Number of processor cores.
• RAM. Total RAM memory (in MB).
• IP Address. IP assigned to the appliance
• Report Group. Reporting group to which the device belongs.
• Last report. Date and time of the last report received.
• OS. Installed operating system.
• Device type. Physical or Virtual.
• Connection. Type of network connection used by the device.
• FlexxAgent Version. Installed agent version.
• FlexxAgent type. Unified or Universal.

Some columns include informative icons providing additional details about the device's status. For example, in the Name column, an indicator showing the number of active alerts on the device may be displayed, while in the Connection column, information about the quality or strength of the network connection is displayed.

Table customization

The platform offers various tools to tailor the table to the user's needs. You can customize visible columns, apply filters, create groupings and perform advanced searches

Category filters

Several quick filters represented by icons are shown above the table. Each one indicates the number of devices belonging to that category.

When one or more filters are selected, the table shows only the devices that meet all selected criteria. To deactivate a filter, simply click on it again.

Applications and Groups allow filtering by the selected application and report groups.

Columns

The Columns tab is used to customize the information visible in the table. From there, it is possible to:

• Show or hide columns.
• Search for columns by name.
• Modify the order in which they appear.

The configuration is saved automatically. To restore the original, use the Restore button.

The order of the columns can also be modified directly from the table by dragging the header of a column to the desired position.

Filters

The Filters tab allows reducing the number of results displayed in the table to locate devices that meet certain conditions.

To create a filter:

1. Click on Add filter.
2. Select the field you want to filter by.
3. Choose one or more values.
4. Add more filters if deemed necessary.

Filters can be combined for more precise searches.

For example, if the Connection column is visible, it is possible to filter devices connected via Ethernet or Wi-Fi.

Filters are saved automatically and remain available when navigating to other sections of the platform.

To show all devices again, use the Restore button.

tip

You can also apply filters directly from the column headers using the context menu available on each of them.

Advanced Filters

The Advanced Filters tab expands search options. You can currently filter by:

• Group. Shows only devices belonging to a specific report group in the table.

  

• Applications. Shows only devices with one or more specific applications installed in the table.

To filter by applications:

1. Access Applications -> Select apps.
2. Select one or more applications from the available list.

Advanced filters can be combined with standard filters for more specific searches.

As in the Filters tab, the Restore option removes the applied filters and restores the original view of the table.

When any filter is applied, the corresponding tab shows a gray dot next to its name, indicating active filter criteria.

Group by

The Group by tab organizes devices according to the values of one or several columns.

For example, if the OS column is visible in the table, devices can be grouped by operating system.

Hierarchical groupings can also be created by adding multiple levels. For example, group first by OS and then by Device Type.

Values

The Values subsection allows calculating aggregate metrics for each group.

The available operations include:

• Average
• Minimum value
• Maximum value

For example, it is possible to view average CPU or memory usage for each operating system, device group, or any other configured grouping.

To remove an aggregated metric, click on the corresponding X icon.

Groups can be removed using the Clear Grouping button or by unchecking the selected fields.

tip

Groupings are particularly useful for analyzing large volumes of information, identifying patterns, and comparing behaviors between different sets of devices.

Device Detail

By clicking on the name of an appliance, you access its detail view. From here you can:

• See extended information about the device.
• Execute remote assistance

Device Information

The detail view is organized into the following tabs:

• Overview
• Diagnosis
• Real-time Connections
• Installed Applications
• Active Alerts
• Intel vPro
• Operations
• Sessions
• Windows Services
• Disks
• Report Groups History
• PnP Events
• PnP Errors
• CrowdStrike Detections
• TrendAI Detections
• Version History
• Boot History
• Installed Updates
• Pending Updates
• FlexxAgent Logs

1. Overview

At the top of this view, a group of cards facilitate reading device data: Status, Operating System (OS), Type, User, Intel vPro Enterprise, Connection, IP Address, FlexxAgent version and FlexxAgent last report.

Below, detailed information is provided:

General

• Name. Identifier assigned to the appliance within the network or system. Generally corresponds to the hostname configured in the operating system.
• Domain. Name of the domain to which the appliance belongs within the network infrastructure.
• OU. Organizational unit where the appliance is located within the domain.
• Connection Time. Total duration of the current session or the time elapsed since the appliance last connected to the server or network.
• Last User. Name of the user who last logged into the appliance.
• Current CPU Utilization. Percentage of use of the central processing unit (CPU) at the time of the query. Indicates the system workload.
• Current RAM Utilization. Percentage of RAM memory currently in use by the system and active applications. Allows evaluating resource consumption.
• Code. Unique identifier or internal code assigned to the appliance for inventory or administrative management purposes.
• Description. Descriptive information about the appliance, any additional relevant detail.
• Uptime. Period of time that the appliance has remained on and continuously operating since the last reboot.
• Downtime. Period during which the appliance has been off, disconnected, or out of service.
• Last Reboot. Date and time the appliance was last rebooted. Useful for monitoring system stability and maintenance.

Appliance

• Operating System Manufacturer. Company or entity responsible for the development and distribution of the operating system installed on the appliance.
• System Model. Specific hardware model identification according to the manufacturer. Allows recognizing the version or line of the device.
• System Type. Classification of the appliance according to its architecture or purpose (e.g.: workstation, laptop, server, virtual machine, etc.).
• System SKU. Commercial reference code (Stock Keeping Unit) assigned by the manufacturer to identify the exact configuration of the model.
• Processor. Technical details of the installed CPU, including manufacturer, model, clock speed, and architecture.
• BIOS Date. Date of the current BIOS or UEFI version installed on the system. Indicates when it was issued or updated by the manufacturer.
• BIOS Serial Number. Unique identifier associated with the specific BIOS version of the appliance.
• Platform role. Main function of the appliance within the environment (for example: desktop, virtual machine, etc.).
• Boot Device. Unit or medium from which the operating system starts.
• Regional Configuration. Language setting configured on the system.
• Time Zone. Time zone set on the system for date and time synchronization.
• Last Boot Duration. Total time it took the system to complete the startup process from powering on to being operational.
• Fast Startup. Indicates if the Fast Startup feature is enabled.

Resources

• CPU Cores. Total number of physical cores available in the processor. Directly affects performance and parallel processing capability.
• Total RAM. Total amount of physical memory (RAM) installed in the appliance.
• Paging File Space. Total disk space assigned to the paging file used to extend virtual memory.
• Paging File. Location and name of the file used by the operating system to manage virtual memory.
• System Disk Usage. Percentage or amount of space currently occupied on the main drive where the operating system is installed.
• Total Hard Disk Size. Total physical storage capacity of the main disk or system drive.

Connectivity

• Connection. Type of active network connection (e.g.: wired, wireless, VPN, virtual network).
• IP Version. Internet Protocol used by the network interface.
• IP Address. Address assigned to the appliance within the local network for identification and communication.
• Subnet. Network range that determines the segment to which the IP address belongs.
• Default Gateway. IP address of the router or device that allows communication with external networks.
• MAC Address. Unique physical identifier assigned to the appliance's network card.
• Network Changed. Indicates if the appliance has recently changed networks.
• Public IP. Externally visible IP address assigned by the Internet Service Provider (ISP).
• ISP. Internet Service Provider. Company that provides Internet connection to the appliance or local network.
• Location. City or geographic location associated with the detected public IP.
• Country. Country corresponding to the geographic location of the public IP.
• Last Network Information Update. Date and time when the connectivity information of the appliance was last updated.

Security

• Encrypted Hard Disk. Indicates if the appliance's main storage is secured through encryption.
• Secure Boot Status. Shows if the Secure Boot function of the BIOS/UEFI is enabled to prevent unauthorized software from loading during startup.
• Kernel DMA Protection. Indicates if the system has enabled direct memory access (DMA) protection to prevent attacks on the kernel from external devices.
• EDR. Endpoint Detection and Response. Name or solution implemented for advanced security and threat detection and response at the endpoint.
• EDR Status. Operational status of the EDR system.
• Antivirus. Name of the antivirus solution installed or integrated into the system.
• Antivirus status. Operational state of the solution.

Update

• Target. Update policy to which the appliance belongs.
• Number of Pending Updates. Total number of updates that are available but not yet installed on the system.
• Last Windows Update. Date and time when the most recent update of the Windows operating system was installed.
• Reboot Pending. Indicates if the system requires a reboot to complete the installation of updates or other configuration changes.
• Number of Days Since Last Windows Update. Time interval (in days) since the last successful installation of operating system updates.

OS

• OS. Full name of the operating system installed on the appliance.
• Operating System Version. Specific version number of the operating system indicating its current revision or update level.
• OS Build. Number of the internal build of the operating system reflecting the exact set of updates applied.
• Windows Directory. Path of the root directory where the Windows operating system is installed.
• System Directory. Path of the subdirectory containing the main files of the operating system.

FlexxAgent

• Report Group. Name of the reporting group to which the appliance belongs.
• Version. Version number of FlexxAgent installed on the appliance.
• Status. Indicates if it is stopped or running.
• Last Report. Date and time when FlexxAgent sent its last report to the appliance.
• Session Analyzer. Indicates if the Analyzer session is configured or not on the appliance.
• Session Analyzer Version. Indicates the version number of the Analyzer session on the appliance.
• Uninstall Protection. Indicates if the uninstallation protection is enabled or not.

Extended

• SMBIOS Version. Version of the System Management BIOS implemented on the system.
• Embedded Controller Version. Version of the embedded firmware or controller.
• BIOS Mode. Indicates if the system operates in Legacy BIOS mode or UEFI.
• Motherboard Manufacturer. Company responsible for the design and production of the appliance's motherboard.
• Motherboard Model. Identification or reference of the specific motherboard model installed.
• Motherboard Version. Number or code that specifies the revision or version of the motherboard design.
• Unique ID. Unique identifier assigned to the appliance or system.
• Windows Type. Type of license or edition of the Windows operating system.
• Creation Date. Date and time when the original installation of the operating system was performed.

Virtualization

• Hypervisor. Virtualization software or platform that manages virtual machines.
• Farm / Cluster. Set of servers or nodes grouped to run and manage virtual machines together.
• Broker. Intermediate server responsible for managing user connections to virtual machines or remote desktops.
• Delivery Group. Set of virtualized desktops or applications.
• Status. Current operational status of the virtual machine.
• Citrix XD Status. Specific status of the appliance within the Citrix environment.
• Registration Status. Indicates if the appliance or virtual machine is correctly registered in the management system or broker.
• Maintenance Mode. Defines if the machine is marked for maintenance tasks, preventing its allocation to end users.
• Type. Classification of the virtual resource.
• Group / Catalog Name. Name assigned to the group or catalog of virtual machines within the virtualization environment.
• Connected From. IP address, hostname, or location from which the user established the connection to the virtual environment.

2. Diagnosis

This section allows you to analyze the resource consumption of a device based on the use of applications and system processes used during a user's session.

To view the data, you need to select beforehand:

• User. If the device has more than one user session started, it allows you to choose the one you want to analyze.
• Date range. Defines the week of the analysis. By default, the data from the last seven days is shown.

Selection chart

Once the user and date range are selected, the selection chart provides an overview of resource consumption. It represents, with colored lines, the behavior of each system resource (CPU, RAM, GPU, Network, and Disk) during the indicated period.

The time window (orange box) allows you to specify a seven-hour time range. When moving it, the lower charts, corresponding to each system resource, will update their data to show the consumption details during those hours.

Performance Charts

Diagnosis allows you to analyze the behavior of each system resource through five graphs. CPU, RAM, GPU, Network, and Disk. Each of them has a dropdown with specific parameters that allow filtering the results.

Hovering over a point on the chart displays detailed information: date, time, maximum and minimum value of the respective parameter.

Parameters by type of system resource

CPU

• % CPU. Total percentage of CPU utilization across all cores.
• % User Time. Percentage of CPU time dedicated to executing processes in user mode.
• % Privileged Time. Percentage of CPU time dedicated to executing system operations (kernel).
• % Processor. Total CPU time used across all processes and system activities.

RAM

• % RAM. Percentage of physical memory currently in use.
• Available MB. Amount of free RAM available to run new applications without causing performance issues.
• Committed MB. Amount of virtual memory that has been committed.

GPU

• % GPU. Percentage of the graphic processing unit (GPU) capacity currently being used.
• GPU Utilization. Percentage of time the GPU is actively processing.

Network

• Network Latency. Maximum latency of all listed applications and processes.

Disk

• Total IOPS. Total input/output operations per second for disk activity.
• Read IOPS per second. Number of read operations per second from the disk.
• Write IOPS per second. Sum of write operations from applications and processes.
• % Disk usage. Percentage of the disk input and output capacity being used.

Applications and Processes Tables

At the bottom are the Applications and Processes tables, showing the data corresponding to the most recent moment of the time range chosen in the selection chart.

Applications

Displays the active applications on the device. Each row includes the following fields:

• Name. Application name.
• Process Name. Process associated with the application.
• Average CPU. Average percentage of CPU utilization.
• Average RAM. Average percentage of physical memory in use.
• Average GPU. Average percentage of GPU utilization.
• Average Total IOPS. Average input/output operations per second.
• Average Read IOPS. Average read operations per second.
• Average Write IOPS. Average write operations per second.
• Maximum Network Latency. Maximum latency recorded for the application.

Summary Box

Selecting an application from the table provides access to a more visual summary box, with its system resource usage metrics.

Processes

Displays the active processes on the device. Each row includes the following fields:

• Name. Name of the product or process.
• Process Name. Name of the executable.
• User. User executing the process.
• Average CPU. Average percentage of CPU utilization.
• Average RAM. Average percentage of physical memory in use.
• Average GPU. Average percentage of GPU utilization.
• Average Total IOPS. Average input/output operations per second.
• Average Read IOPS. Average read operations per second.
• Average Write IOPS. Average write operations per second.
• Maximum Network Latency. Maximum latency recorded for the process.

3. Real-time Connections

This section provides real-time visibility into the external network connections established by the device's processes and applications. It offers two complementary views: a process table with the technical details of each connection and an interactive map that geographically represents the destinations of those connections.

Requirements

This section will not display data if any of the following conditions are met:

• The device is turned off or is not reporting to the system.
• The version of FlexxAgent installed on the device is earlier than 26.6.

3.1 Connections

This view lists all the device's processes and applications that have active external network connections. For each process, state data, protocol, ports, owner user, and latency metrics are collected.

The section is divided into two subsections: Network Interfaces and Process Table.

Network Interfaces

Displays the active network interfaces on the system at the time of the query. For each interface, the following information is provided:

Field	Caption
Name	Interface identifier in the system
Type	Interface type (Ethernet, Wi-Fi, etc.)
Speed	Negotiated link speed
Driver	Device driver name

Process table

Column	Caption
Compute	Process or application name.
Protocol	Transport protocol used: TCP or UDP.
Local Address	Local IP address of the connection.
Local Port	Local port associated with the connection.
Remote Address	IP address of the remote host.
Remote Port	Port of the remote host that the process connects to.
User	User of the operating system owning the process.
Latency	Last latency value recorded for the connection.
Status	Current state of the connection: (Established), (Bound), or (Listening).
Duration	Elapsed time since the connection was established.
Alert	Active indicator when a state change is detected in the connection during the refresh interval.
PID	Identifier of the process in the operating system.
Location	Destination city of the connection, according to the remote IP geolocation.
Average Latency	Average latency calculated over the sample history.
Minimum Latency	Minimum recorded latency value.
Maximum Latency	Maximum recorded latency value.

Available actions

The top bar of the table includes the following controls:

• Search. Filters processes by name in real-time.
• State Filter. Allows restricting the view to connections in a specific state (e.g., ESTABLISHED, LISTENING).
• Auto-refresh. Sets the automatic data update interval.
• Export. Downloads the table content in the available format.

3.2 Map

The map view geographically, on an interactive map, represents the destinations of all active connections of the device's processes and applications. Information is updated in real time.

Map Controls

Process Search / Filter: Allows showing only connections associated with one or more specific processes.

Info for Each Destination

Clicking on a line in the map opens a panel with detailed statistics of that destination:

Field	Caption
Location	Corresponding destination city.
Coordinates	Latitude and longitude of the geolocated point.
Total Connections	Total number of active connections to that destination.
Remote IPs	List of all remote IP addresses used at that destination.
Average Latency	Average latency to that destination, calculated over all connections.

Additionally, the panel breaks down the information by process, showing for each:

• Process Name
• Number of active connections to that destination
• Remote IPs used
• Average latency of the process to that destination

Lines by Latency

Each line uses the average latency (ms) of its connections:

State	Latency	Color
Good	< 150 ms	Green
Average	150–250 ms	Yellow
Bad	> 250 ms or timeout	Red
No Data	- or empty	Gray

4. Installed apps

It displays a table with all the applications detected by FlexxAgent Analyzer on the device.

The information includes:

• Name. Name of the application installed on the device.
• Publisher. Company that developed the application.
• Version. Version of the application.
• Installed on. Date it was first reported on the device.
• Installation location. Folder where the application is located.
• Last report. Date of its last report on the device.

The information provided by Installed Applications is collected by FlexxAgent Analyzer when its process starts. From that moment, the data is updated every 12 hours, as long as there is a user session started, or at each login.

5. Active alerts

Presents a table with the active alerts found on the appliance.

The information includes:

• Severity. Severity level (Critical, Warning, or Informational).
• Alert Name. Name identifying the alert. You can click on it for more details.
• Information. Description of the alert.
• Start Date. Date and time the alert is recorded.
• Notification Date. Date and time of the alert notification.
• Element. Name of the device where the alert is recorded.

6. Intel vPro

From this tab, you can view detailed information about the Intel EMA agent installed on the device and access out-of-band management functions, even when the operating system is not available.

Information Detail

• Compatible with Intel AMT. Indicates whether the device is compatible with Intel Active Management Technology.
• EMA Agent Version. Version number installed on the device.
• Intel EMA ID. Unique identifier assigned by Intel EMA.
• Intel EMA Agent Status. Indicates whether the agent is Connected or Disconnected.
• CIRA Status. Indicates whether Client Initiated Remote Access, used for secure remote access, is Connected or Disconnected.
• Status. Indicates whether the device is On or Off.
• Power Status Update. Date and time of the last power status modification.

Available actions

Intel vPro allows remote management operations even when the operating system has not started or the device is unresponsive. These actions are executed out-of-band, accessing the hardware directly.

• Turn On. Turns on the device.

• Restart. Restarts the device.

• Power Actions: Gradual Shutdown, Gradual Restart, Shutdown, Suspend, Hibernate.

• Boot Actions

  • Boot to BIOS. Allows direct BIOS startup on devices that cannot boot their operating system.

• Remote KVM Connection. Provides a direct view of the device's screen to control it as if you were physically in front of it, even when the operating system does not load.

  

  This function allows:

  • View the device's screen in real-time.
  • Diagnose and solve problems in geographically distributed environments or with limited IT resources, as it avoids in-person interventions.

Power on schedules

This technology also allows setting the date, time, and recurrence for the device's auto power-on.

Create a schedule

1. In Portal, access Worksaces -> Workspaces.
2. Select a device from the list.
3. In the sidebar menu, select the Intel vPro tab.
4. In the Power on schedules section, click New.
5. Fill in the requested data in the form:

• Program Name. Name of the power-on schedule.
• Start Time (UTC). Date and time when the device will be turned on, in UTC.
• Delete After Completion? If selected, once the power-on is executed, the schedule will be deleted.
• Is it recurrent? If activated, allows you to specify every how many days and at what time the device will be turned on.

6. Click on New.

7. Operations

This tab allows you to view all operations executed on the device, providing full visibility into administrative actions, remote assistance, and automated tasks performed from the Portal.

The information is presented in a table format, allowing you to track the status, source, and result of each operation.

The operations table includes the following fields:

• Description. Brief explanation of the operation performed. Clicking opens the action details.
• Operation Type. Identifies the executed action.
• Status. Current execution situation: In Progress, Error, Completed, or Pending.
• Initiated by. The user who executed the operation.
• Started At. Date and time when execution started.
• Complete. Date and time of execution completion.
• Created on. Date and time of operation record creation.
• FRA Start. Date and time when Flexxible Remote Assistance (FRA) started, if applicable.
• FRA End. Date and time of Flexxible Remote Assistance (FRA) completion, if applicable.
• FRA Type. Type of Flexxible Remote Assistance (FRA) executed: Attended, Unattended, or Dynamic.

Operation details

Selecting an operation from the table opens a detailed view allowing analysis of its execution and result.

Summary

This section displays consolidated operation information:

• Operation Type
• Description
• Started At
• Complete
• Initiated by
• Status (Global). General status of the operation.
• Status (Workspace). Specific status of the operation on the device.
• Workspaces. Devices associated with the operation.
• Summary. Visual indicator of the overall result of the operation:
  • Green: Complete
  • Yellow: Pending
  • Red: Error
  • Gray: Unknown

Events

This section shows the event history generated by the system during the operation execution, allowing error diagnosis or progress verification.

Each event includes:

• Date. Date and time the event was recorded.
• Type. Event level: Information, Error, or Critical.
• Origin. System component that generated the event.
• Message. Detailed description of the event.

The View complete events button redirects to the Operations section, where you can view detailed information and the complete execution history.

8. Sessions

Shows the active or recorded sessions, with details like:

• User. Name of the user who logged into the device.
• Session Type. Type of session started (Device or Application, for virtualized application sessions).
• Windows Session ID. Unique identifier assigned to each user session.
• Connection Status. Status of the session connection (Disconnected or Active).
• Start Date. Date and time the session started.
• CPU Usage. Percentage of processor usage for the session, excluding resources used by other sessions or system processes.
• RAM Usage. Amount of volatile memory used by the activities and applications of a specific user during a session.
• RTT Usage. Time it takes for a data packet to travel from the user's device to a remote server or destination and back to the user.

9. Windows services

Contains the list of operating system services, including:

• Display Name. Name of the programs that run in the background.
• Status. Status of the Windows services (Running or Stopped).
• Startup Type. How the service has been activated (Automatic, Manual, or Disabled).
• Log On As. Mode of login.
• Accept Stop. Whether or not to stop Windows services (Yes or No).

10. Disks

Displays the partitions of the appliance with the following information:

• Device ID. Name of the device.
• Name. Name of the main disk partition.
• Encryption. Indicates whether the device is encrypted or not, or if no value is available (N/A).
• Encryption Method. Indicates the encryption method.
• Volume Label. Name of the volume label.
• Total Size. In megabytes, total disk space.
• Used Size. In megabytes, disk space used.
• Used Percentage. In percentage, disk space used.
• Unit OS. Unit possession (Yes or No).
• Location. Disk location access path.
• Partition. Indicates the number of storage divisions the disk has.

11. Reporting groups history

Shows the current and previous report groups of the appliance:

• Source. Reporting group the device comes from.
• Destination. Reporting group the device is entering.
• Assignment Type. Manual or Automatic assignment.
• Requested Date. Date and time of the device's reporting group change.

12. PnP Events

Shows a table with the list of Plug and Play events that have been recorded on the appliance. The information includes:

• Action. Hardware component state (printer, mouse, etc.) with respect to the device (Plugged or Unplugged).
• Date. Last PnP update registered by FlexxAgent.
• User. User currently using the device.
• Description. Hardware component connected to the device.
• Device ID. Identification code of the hardware component connected to the device.

13. PnP Errors

Shows a table with the list of Plug and Play errors that have been recorded on the appliance. The information includes:

• Name. Name of the hardware component connected to the device.
• Update Date. Last PnP update registered by FlexxAgent.
• Class. Type of hardware component connected to the device.
• Device ID. Identification code of the hardware component connected to the device.

14. CrowdStrike Detections

If the CrowdStrike integration is performed from Portal, a table will be displayed with information about threat detections, including the following fields:

• Severity. Criticality level assigned to the detection according to the potential impact or risk of the threat.
• Created. Date and time the detection was generated in the system.
• Username. User associated with the activity or process that triggered the detection.
• Status. Current status of the detection.
• Display Name. Descriptive name assigned to the detection, summarizing the type of threat or behavior identified.
• Description. Expanded information about the detection.
• Command line. Command or instruction executed on the appliance related to or that generated the detection.

info

FlexxAgent synchronizes CrowdStrike alerts every minute.

15. TrendAI Detections

If TrendAI integration has been done from Portal, a table will be displayed with threat detection information, including the following fields:

• Severity. Criticality level assigned to the detection according to the potential impact or risk of the threat.
• Created. Date and time the detection was generated in the system.
• Username. User associated with the activity or process that triggered the detection.
• Status. Current status of the detection.
• Display Name. Descriptive name assigned to the detection, summarizing the type of threat or behavior identified.
• Description. Expanded information about the detection.
• Command line. Command or instruction executed on the appliance related to or that generated the detection.

info

FlexxAgent syncs TrendAI alerts every minute.

16. Version history

Displays a table with the versions of FlexxAgent that have been registered on the appliance.

• Version. Version number of FlexxAgent detected on the appliance.
• Discovered on. Date and time when the system identified the presence of that version of FlexxAgent on the appliance.

17. Boot history

Through a chart, this section shows the log of boot time taken by the device.

18. Installed updates

Displays a table with the list of updates installed on the appliance. The information includes:

• Installation date. Date and time the update was installed on the appliance.
• KB. Unique identifier of the update package issued by Microsoft.
• Title. Name of the update.
• Product. Name of the product to which the update applies.
• Severity. Criticality level assigned to the update according to its importance or impact on security (Critical, Important, Moderate, Low, Unspecified).
• Arrival date. Date when the update was published or made available by the provider.
• Category. Functional or technical classification of the update.

19. Pending updates

Displays a table with the list of pending updates on the appliance. The information includes:

• KB. Unique identifier of the update package issued by Microsoft.
• Title. Name of the update.
• Product. Name of the product to which the update applies.
• Severity. Criticality level assigned to the update according to its importance or impact on security (Critical, Important, Moderate, Low, Unspecified).
• Arrival date. Date when the update was published or made available by the provider.
• Category. Functional or technical classification of the update.

20. FlexxAgent logs

This section shows the log files generated by the agent and collected from the device.

Information available in the log table

The log table includes the following information:

• File name. Name of the file generated by FlexxAgent.
• Session. Identifier of the installation or execution session to which the log belongs.
• Size. Size of the log file.
• Uploaded on. Date and time when the log was uploaded to Portal.
• Actions. Operations available on the log file.

  • View. Displays the agent log content.

  • Download. Allows downloading the log file for local analysis.

    

Event Log Recollection

The Collect agent logs button, located at the top of the table, allows requesting the collection of logs from the device during the time interval for which logs are desired.

The collection generates an operation that can be monitored from the Operations section of Portal.

Log retention

FlexxAgent stores logs locally on the device for a maximum period of five days. After this time, old files are automatically deleted.

Device location

In addition to viewing from Portal, logs can be viewed directly on the system where the agent is installed.

For more information, please refer to the FlexxAgent cross-platform documentation.

note

FlexxAgent logs are only available on devices that have FlexxAgent cross-platform version 26.1.501.195 installed.

20. Workspace groups

This section displays a table with the list of workspace groups to which the device belongs.

The table includes the following fields:

• Name. Name of the workspace group.
• Description. Brief text explaining the purpose of the group.
• Type. Group type. It can be: Static, Dynamic or Enter ID.
• Workspaces. Total number of devices currently part of the group.

Flexxible Remote Assistance

Flexxible Remote Assistance is a feature designed to facilitate secure and efficient technical support, allowing an operator to remotely access a device and take control of the user's session to troubleshoot issues, implement changes, or perform administrative tasks.

Perform remote assistance

1. Access Portal -> Workspaces -> Workspaces.

2. In the table, select the device on which you want to perform assistance.

3. Click on the Remote Assistance button.

4. Select the type of assistance.

5. Wait a few seconds and download the activation file.

   

6. User consent will be requested before the operator can take control.

   

7. Begin remote assistance.

   When remote assistance is in process, the device detail view displays the message:

   Currently, there's an ongoing remote assistance session for this workspace. For more information, see the section Operations.

   

info

For more detailed information on executing remote assistance from the Portal, check its documentation.

Available actions

From the list view of devices, you can perform the following actions:

Button	Action
Remove devices	Permanently deletes devices.
Export	Downloads an Excel file with the records of the table.
Refresh	Updates the table list.

Remove devices

This action allows devices to be deleted in bulk or through selection in the table, according to user permissions and respecting the organizational structure.

A user will be able to delete devices if:

• They have access to the tenants and sub-organizations to which those devices belong.
• They have access to the report groups associated with those devices.

Bulk device removal

To delete devices massively:

1. Access Portal -> Workspaces -> Workspaces.

2. Click the Remove devices button located at the top of the table.

3. Enter the list of device names to remove in the form.

   

4. Click Start process.

5. A validation window will be displayed with the following information:

   • To remove. Devices to be removed.
   • Not found. Names that do not exist in the organization/sub-organization.
   • Possible duplicates. Names that match more than one device.

   

   

6. Review the details and click Remove workspaces.

7. Confirm the operation in the pop-up window.

   

Once the operation is confirmed, the following message will be displayed:

The process to delete (number) workspaces has started, you can track its progress here.

By clicking here, the user will be redirected to the Operations section, where they can check the task's progress.

Delete selected devices

To delete selected devices:

1. Access Portal -> Workspaces -> Workspaces.

2. In the table, select the devices you want to delete.

3. Click on the button Delete the selected workspaces.

   

4. Confirm the operation in the pop-up window.

   

   Once the operation is confirmed, the following message will appear:

The process to delete (number) workspaces has started, you can track its progress here.

By clicking here, the user will be redirected to the Operations section, where they can check the task's progress.

note

To prevent accidental mass deletions, the limit for this operation is 50 devices.

Considerations on deletion

• Device deletion is not immediate. After requesting deletion, it may take a few minutes for the process to complete and the device to no longer be displayed in Portal.

• Even if a device is deleted, if it has FlexxAgent installed and continues reporting, the device will reappear on the platform.

Deletion tracking

This operation works similarly to other system operations: each deletion will generate one or several entries in the Operations section.

If devices from several sub-organizations are removed, an independent operation for each sub-organization will be generated.