Skip to main content

Manage and Verify Agents

After you deploy, manage your fleet from the Agents list and confirm each endpoint is reporting.

The Agents list​

Open Configure in the sidebar, then the Agents tab. The Agents list shows:

  • Last-seen freshness for each agent, so you can spot endpoints that stopped reporting.
  • Edit description to label an agent.
  • Delete and undelete, so a removed agent can be restored.
  • Clone detection, which flags agents that share a credential (for example, an image cloned without re-enrolling).

Confirm install on an endpoint​

The reliable presence check is the Windows service, not the MSI product code (the GUID changes across versions). The service name is SparkLogsAgent and its display name is "SparkLogs Agent":

Get-Service SparkLogsAgent

Use this same check in RMM and Intune detection rules. See RMM mass-deploy and Microsoft Intune.

Verify data is arriving​

Open Explore and confirm events from the endpoint are arriving in the expected organization.

If an agent does not appear or no data arrives, see Troubleshooting.