Skip to main content
The endpoint detail view shows the telemetry the Wazuh agent integration collects from a single host. Open it by clicking an endpoint hostname, or by selecting View Details from the row action menu (...) on the Endpoints table. A tab bar at the top right switches between five views, each on its own URL.

Tabs

Networks

/endpoints/<endpoint-id> or /endpoints/<endpoint-id>/networks Network interfaces configured on the host, physical and virtual. Columns: Interface Name, MAC Address, IP Address, Netmask, Type, State.

Network Ports

/endpoints/<endpoint-id>/ports Listening and active ports the agent observes. Columns: Protocol (TCP/UDP), Local Address, Local Port, Remote Address, Remote Port, State, Process ID / Name.

Processes

/endpoints/<endpoint-id>/processes Running processes captured during the agent’s inventory sync. Columns: Process ID, Name, Path, User / Owner, CPU Usage, Memory Usage.

Policy Checks

/endpoints/<endpoint-id>/policy-checks Security compliance benchmarks applied to the endpoint, such as CIS benchmarks and SCA checks. Columns: Policy Name, Status (Passed / Failed), Total Checks, Passed Checks, Failed Checks, Compliance Score. Clicking a policy row opens the detailed results, listing each rule evaluation with its remediation instructions and rationale.

Packages

/endpoints/<endpoint-id>/packages Installed software, applications, and patches reported by the agent. Columns: Package Name, Version, Architecture, Vendor, Install Time, Description.

Move through the tabs

  1. Open the row action menu (...) for a host and click View Details. You land on Networks. Networks tab listing the host's interfaces with MAC addresses, IPs, netmasks, and states
  2. Click Network Ports to see active listening ports and connections. Network Ports tab listing protocol, local and remote addresses, port states, and owning processes
  3. Click Processes for running processes and their resource use. Processes tab listing PIDs, process names and paths, owners, and CPU and memory usage
  4. Click Policy Checks for compliance benchmark results. Policy Checks tab listing applied policies with pass and fail counts and compliance scores
  5. Click Packages for the installed software inventory. Packages tab listing installed packages with versions, architecture, vendor, and install times