Hey everyone,
I'm hoping someone can help me figure this out. I'm pretty new to using SentinelOne (we switched from another platform a few months ago). I'm mostly comfortable with the basics, but this one has me stumped.
In the management console, one of our agents has been showing a green "healthy" status for days. But when I go to look at the event logs or the deep visibility for that specific computer, there's nothing recent. It's like the agent is checked in and says it's fine, but it's not actually sending any data about what's happening on the endpoint. I even tried generating some test activity on that machine, and still nothing shows up in the console.
Has anyone else run into this? I'm worried there's a gap in protection we're not seeing. I've checked the obvious stuff I can think of: the machine is definitely online, and the S1 service is running. I'm just not sure what to check next.
Is there a way to "jog" the agent to start reporting again, or is a reinstall usually the fix? Any pointers would be really appreciated