genian-edr-endpoints
Lists the agents (endpoints) the console manages, or reads one of them with device-id.
genian-edr-endpoints [profile=VALUE] [keyword=VALUE] [device-id=VALUE] [is-include-deleted=VALUE]
- profile=VALUE
- Optional. Genian EDR connect profile name. Every Genian EDR profile is queried when omitted.
- keyword=VALUE
- Optional. Quick search text, matched the way the endpoint list search box matches it
- device-id=VALUE
- Optional. Read this one endpoint in detail
- is-include-deleted=VALUE
- Optional. Include deleted agents (t/f). Defaults to f.
Output Fields
| Field | Type | Name | Description |
|---|---|---|---|
| device_id | String | Device ID | e.g. 0f8c2a4e-1b7d-4e5a-9c3f-2d6b8e1a7c45. Agent device ID. |
| host_name | String | Host name | e.g. DESKTOP-A1B2C3D. Host name of the device. |
| ip | IP | IP | e.g. 10.10.20.31. IP address of the device. |
| mac | String | MAC | e.g. 00:1A:2B:3C:4D:5E. MAC address. |
| os | String | OS | e.g. 1. OS code: 1 Windows, 2 macOS, 3 Linux. |
| platform | String | Platform | e.g. Microsoft Windows 11 Professional x64. OS name and edition. |
| domain | String | Domain | e.g. WORKGROUP. Windows domain. |
| logon_id | String | Logon ID | e.g. user01. Logged on account. |
| agent_version | String | Agent version | e.g. 3.0.12.1002-54304. Installed agent version. |
| status | String | Status | e.g. AGENT_RUNNING. Agent status. |
| is_active | Boolean | Active | e.g. true. Whether the agent is up. |
| group_names | String | Groups | e.g. 기본그룹. Endpoint groups. |
| policy_name | String | Policy | e.g. Windows 기본정책. Applied policy. |
| heartbeat_time | Date | Heartbeat | e.g. 2026-11-07 00:14:20. Last heartbeat. |
| last_event_time | Date | Last event | e.g. 2026-11-07 00:14:20. Last event sent. |
| update_time | Date | Updated | e.g. 2026-11-07 00:14:20. Last update of the record. |
| _time | Date | Time | e.g. 2026-11-07 00:14:20. Representative time of the row. |