Events for Endpoint Agent

Any information provided in this document regarding future functionalities is for informational purposes only and is subject to change including ceasing any further development of such functionality. Many of these future functionalities remain in varying stages of development and will be offered on a when-and-if available basis, and Cisco makes no commitment as to the final delivery of any of such future functionalities. Cisco will have no liability for Cisco's failure to deliver any or all future functionalities and any such failure would not in any way imply the right to return any previously purchased Cisco products.

Events for Endpoint Agent provide a comprehensive solution for monitoring and troubleshooting the end-user experience by automatically identifying significant changes within an endpoint environment. These events capture critical system, network, and application-layer shifts that impact performance, providing the visibility required to diagnose issues that might otherwise remain undetected.

Events are categorized into two main types to give you a complete picture of the user's environment:

• Automated Event Detection: This feature uses advanced algorithms to analyze performance data across your organization. It detects anomalies—such as a sudden drop in application availability or a spike in network latency— and correlates them into a single event. It then assigns a "problem domain," such as Local Network, Proxy, or Server, so you know exactly where to start your investigation.

• Endpoint System Events: These are specific, real-time logs from the agent itself. They record local changes like Wi-Fi signal degradation, VPN connections or disconnections, gateway changes, and high CPU or memory usage.

How to use Events for troubleshooting

You can use these events to move from "something is slow" to a definitive root cause in seconds. Here’s how they simplify your workflow:

• Correlate Local Changes with Performance: If a user reports a slow Webex session, you can check the Log tab in the Endpoint Agent view. If you see a "Wi-Fi Changed" event followed by a drop in signal quality at the exact time of the report, you've identified a local environment issue rather than a service outage.

• Distinguish between Individual and Widespread Issues: Automated events help you determine the scope of a problem. If an event shows that 20% of your agents are experiencing a Server Issue with a specific SaaS app, you can rule out local device problems and focus on the service provider.

• Identify the Cause for Server Errors: For server-related events, the system provides a Cause field. This field highlights the specific error seen across multiple tests, such as an "HTTP 504 Gateway Timeout," saving you from manually digging through individual test rounds.

• Reduce Noise and MTTD: Instead of sifting through thousands of individual alerts, you can focus on high-impact events. This reduces your Mean Time to Detect (MTTD) by grouping related failures into a single, actionable incident.

• You can learn more about Event detection and handling here