Views:

Trend Vision One tracks and provides feedback on the actions taken on endpoints, email messages, and network events.

After triggering a response to an event or object, you can view the response task status and command details in the Response Management table.
Data
Description
Task ID
The current status of the command sent to the managing server and the unique ID assigned to the task
If you trigger a response for multiple targets, the Response Management app displays the least successful task status for the group. Click the number to view the task status for each target in the group.
Possible task statuses include:
  • In progress (in_progress=GUID-A55897DB-3DEA-4F5C-B7F9-70B3D7FB9EDE=1=en-us=Low.jpg): Trend Vision One sent the command and is waiting for a response.
  • Successful (successful=GUID-1E31AD86-DE2E-48B5-85F7-7C78A3E8BB11=1=en-us=Low.jpg): The command was successfully executed.
  • Partially successful (partially_successful_icon=GUID-20230103030733.jpg): One or more commands was unsuccessful.
  • Unsuccessful (error=5cc21722-7ceb-480c-b9c2-a47d420cf1cc.jpg): An error or time-out occurred when attempting to send the command to the managing server, the agent is offline for more than 24 hours, or the command execution timed out.
  • Pending approval (pending_approval=f0525c66-199a-46f5-b40a-902bd498cf53.jpg): The task is pending approval from specified users
  • Rejected (rejected=bd05fc87-5b5d-4d84-bfb1-3a6dc09ddac5.jpg): The task has been rejected
  • Queued (queued=GUID-65C0DF81-E50D-4D51-9602-2E9B7A0E5F14=1=en-us=Low.jpg): The managing server queued the command because the agent was offline.
  • Manually terminated (ManuallyTerminated=678443aa-f9c6-4f0d-b3e9-9cfc6590c14c.png): The task has been manually terminated
Important
Important
The Task status indicates whether the managing server was able to successfully receive and execute the command. If the command target is a Security Agent, the Task status does not necessarily indicate whether the target Security Agent or object successfully executed the command.
If the task status is Queued (queued=GUID-65C0DF81-E50D-4D51-9602-2E9B7A0E5F14=1=en-us=Low.jpg) or Unsuccessful (error=5cc21722-7ceb-480c-b9c2-a47d420cf1cc.jpg), you can click the Resend command (resendCommand=GUID-47F93E03-99D1-49B4-95D0-C6D07F10B592=1=en-us=Low.jpg) icon to immediately send the exact same command to the managing server.
Action
The command sent to the target
For more information, see Response actions.
Target
The target that the command attempts to take action on
The type of target determines the actions that are available. For example, the Terminate action is available for processes and containers but not for email messages.
Created by
The user that triggered the response
Created from
The location on the Trend Vision One console where the user triggered the response
Last updated
The last date and time that the Trend Vision One console received data regarding the task
[Additional actions]
Depending on the action taken, additional actions may be available by clicking the options button (options_icon=GUID-408062FA-DA13-4ECA-81EB-31A5B68355A1=1=en-us=Low.jpg) at the end of the row
For more information, see Response actions.