Information

On the Result screen, click the investigation name to get a quick overview of the investigation results. To cancel the investigation, click Stop.

This screen displays the following details:

• A doughnut chart showing the number of total endpoints already classified as being Matched, Safe, Pending or Cancelled

  The number of total endpoints is regularly updated while the investigation is running.

  Table 1. Investigation Status

  Icon	Label	Description
  	Matched	Number of investigated endpoints containing a match
  	Safe	Number of investigated endpoints where a match was not found
  	Pending	Number of endpoints still to be investigated. An investigation is complete once there are no more pending endpoints to investigate.
  	Cancelled	Number of endpoints which were not investigated. This may be caused by user cancellation, system error, or endpoint timeout For details, see Troubleshooting Investigation Status.

  A breakdown of the totals is given on the left of the chart.

• Parameters used when the investigation was created

  Click Criteria to review the search conditions used by the investigation.

  For details, see Investigation.

• A table of results of which provides more details about each endpoint included in the investigation

  This table groups the endpoints into tabs based on the investigation status. This table displays the following details:

  Column Name	Description
  Host Name	The host name of the endpoint. Click the endpoint's host name to go to that endpoint's Matched Endpoint screen. For details, see Result Details.
  IP Address	The IPv4 address of the endpoint.
  Operating System	The version of Windows installed on the endpoint.
  Asset Tag	The tags associated with the endpoint.
  Object Count	The number of matched objects found on the endpoint.
  Time Elapsed	Time elapsed since the investigation started.

Click View Investigation Criteria to review the search conditions used by the investigation.

For details, see Investigation.