Edge Intelligence

Edge Intelligence gives you real-time insights, as well as remediation and alerting capabilities for your environment. Data is retrieved from devices in real-time, at the moment you request it.

You can enter your questions as you would ask them—for example, "show me the firewall status." Edge Intelligence leverages the power of machine learning to provide you with the desired data.

Alternatively, there are several predefined queries available, related to Security, Health, and Inventory. A selection of these queries can also be run against a device you selected from the Devices page. See also Device details.

After installing the Ivanti Neurons Agent on a device, it will start responding to queries. For details about installing the agent, see Agent management.

Some of the features in Edge Intelligence, for example performing actions or setting alerts, are available only to users with the appropriate role.
For information about managing roles, see Managing members and roles.

Query widgets

The response to your query is displayed in a widget.

Example of a query widget

Click on a result label listed above the graph (e.g. Enabled in the image above) to toggle between hiding or showing the related results.
Click on a result category in the graph (e.g. Domain in the image above) to go to the list view, filtered for that category.

Depending on the widget, the following controls may be available. Some controls are only available from the list view.

  • Toggle view icon – Toggle between graph and list view. By default, most widgets open as a graph. Switch to the list view to see the results in more detail.

    The list view also enables you to initiate actions to solve an issue you identified from the query results. For example, if the results show a device with a disabled firewall, you might use an action to enable the firewall. For details about using actions, see Edge Intelligence actions.

  • Alerting icon – Enable alerting. You can configure alerts based on real-time events. Alerts can also trigger one or more actions. For example, Edge Intelligence can initiate the Cleanup disk action if free disk space on drive C: drops below 10%. For details about using actions, see Edge Intelligence actions.

    For an overview of configured alerts, click Alerting icon in the search bar.

  • Scope and parameters icon – Define the scope ("on which endpoints will the query run") and/or parameters ("which query will run on the endpoints") for the query. Some parameters are mandatory.

  • Repeat icon – Repeat the query for all currently connected endpoints.

  • Pin icon – Pin a query to gather results for 24 hours. Because Edge Intelligence uses real-time information, it can only return data from agents that are online at the time the query is sent. By pinning your query, Edge Intelligence will gather responses to your query from agents that come online for a period of 24 hours.
  • Trending icon – Start trending. By default, Edge Intelligence does not retain query results. However, for certain queries you may want to track how a specific aspect develops over time. The trending option enables you to do just that.
    You can specify the data collection period and interval, and whether the trending data should be available only to you or to everyone in your organization.
  • Copy icon – Copy the results that are displayed on the current page of the widget.
  • Export icon – Export all query results.
  • Scope icon – Use the current selection of agents as the scope for other queries. This allows you to limit additional investigation or remediation to a subset of devices.

    You can add filter criteria by applying the scope of additional search results from the same widget or from other Edge Intelligence widgets.
    To reset the filter, click Close icon at the end of the message indicating that a filter is active.