3.1.8.4. Agent payload timeline

After the agent is installed and able to communicate with the ON Core, every source sends multiple payloads through the agent. In this case, we are only going to list the last payload for every user.

The columns displayed in the Agent payload timeline are the same columns displayed in Agent payloads, plus an extra column called timeline. For more information about the table columns, see the Agent Payload section.

3.1.8.4.1. Filters

The filter capability provides a way to narrow down your payloads based on specific criteria within each category:

You can filter the payloads based on Hostname, MAC, IP, Last user, Last date, OS.

For each filter type, you can apply different conditions according to the parameters you are applying. For example, contains, less than, starts with, is not, etc.

3.1.8.4.2. Timeline

In the following image we can see the output of the eye icon button in the Timeline column:

Clicking on the eye icon, will display the payloads for that source, sorted from the most recent to the oldest, with details of the different payloads.

You can also call the agenttimeline using the API key.