NEXA
{{ currentViewLabel }}
Results
{{ searchResultUsers.length }} users
{{ searchResultComputers.length }} hosts
AD
ES
Active Directory Users
{{ res.displayName || res.login }}
{{ res.login }} · {{ res.department }}
Endpoints (AD + Elastic)
{{ comp.hostname }}
{{ comp.ip || 'N/A' }}
· {{ comp.os }}
{{ (comp.source || 'unknown').toUpperCase() }}
{{ formatTimeAgo(comp.lastCheckin) || formatTimeAgo(comp.lastLogon) || '' }}
No results found for "{{ searchQuery }}"
Infrastructure Status
{{ svc.name }}
{{ (svc.data?.status || 'unknown').toUpperCase() }}
{{ key }}
{{ val || '—' }}
Search for a user or endpoint to begin triage
Use name, login, hostname, serial number, IP or email
{{ user.displayName || user.login }}
{{ user.login }}
{{ user.ad.disabled ? 'DISABLED' : (user.ad.locked ? 'LOCKED' : 'ACTIVE') }}
PWD NEVER EXPIRES
Profile
{{ f.label }}
{{ user[f.key] || 'N/A' }}
Assigned Endpoints (ManagedBy)
{{ comp.hostname }}
{{ comp.os || 'Unknown OS' }}
{{ comp.enabled ? 'ON' : 'OFF' }}
Account State & Security
{{ s.label }}
{{ s.value }}
{{ alert.title }}
{{ alert.detail }}
Authentication Events (Elastic)
| Time | Event | Host | Source |
|---|---|---|---|
| {{ formatTimestamp(evt['@timestamp']) }} | {{ getLoginEventLabel(evt) }} | {{ getNestedStr(evt, 'host.hostname') || getNestedStr(evt, 'host.name') || '—' }} | {{ getNestedStr(evt, 'source.ip') || '—' }} |
{{ user ? 'No login events found in Elastic' : 'Select a user to view events' }}
Select an endpoint assigned to {{ user.displayName || user.login }}:
{{ comp.hostname }}
{{ comp.os || 'Unknown' }}
Last Logon{{ comp.lastLogon || 'N/A' }}
Created{{ comp.whenCreated || 'N/A' }}
No assigned endpoints. Search for a hostname directly.
{{ selectedComputer.hostname }}
Endpoint Detail
System Info
{{ f.label }}
{{ f.value || 'N/A' }}
Hardware & Agent Specs
CPU
{{ computerSpecs.cpuModel }}
{{ computerSpecs.cpuCores }} cores
{{ computerSpecs.cpuUsagePct.toFixed(1) }}%
Memory
{{ computerSpecs.memoryUsed || '?' }} / {{ computerSpecs.memoryTotal }}
{{ computerSpecs.memoryPct.toFixed(1) }}%
Disk
{{ computerSpecs.diskUsed || '?' }} / {{ computerSpecs.diskTotal }}
{{ computerSpecs.diskPct.toFixed(1) }}%
Details
{{ f.label }}
{{ f.value }}
Local/Active Users
{{ u }}
No specs data available from Elastic Agent
Event Logs
{{ computerLogs.length }}
{{ formatTimestamp(log['@timestamp']) }}
{{ getLogLevel(log) }}
ID:{{ getWinlogEventId(log) }}
{{ getLogProvider(log) }}
{{ log.message || getLogFallbackMessage(log) }}
{{ getLogProcess(log) }}
{{ getLogUser(log) }}
{{ JSON.stringify(log, null, 2) }}
No logs found for "{{ logSeverity }}" filter