trace
Endpoint Management Platform
Dashboard
Users / Agents
All
0
Online
0
Offline
0
Warning
0
Error
0
Security
0
Unallocated
0
| Hostname | IP Address | Platform | Status | Health | Issue | CPU | Memory | Last Seen |
|---|
Storage Agents
Probes & Network Map
All Probes
0
Healthy
0
Warning
0
Error
0
Uncategorised
0
| Name | Category | Type | Target | Status | Health | Interval | Actions |
|---|
Agent Groups
Group 2+ agents that belong to the same person (e.g. home PC, office PC, laptop) to see their combined productivity as one view. Each agent still runs its own probes and reports its own data independently.
TraceBoard
Auto-refresh:
-
Live Alert Feed
0
Loading alerts...
Event Timeline
Loading events...
Tenant Health
Loading...
Probe Status Matrix
0 down
Loading probes...
Agent Health
Loading...
WAN / ISP Tunnels
Loading...
Vendor Health
Loading...
SOC Dashboard
Auto-refresh:
-
XDR Threats
-
active threats
Auth Failures
-
last 24h
Blocked Traffic
-
events last 24h
Scan Findings
-
open findings
Anomalies
-
last 48h
Open Incidents
-
across all sources
Incidents
| Severity | Title | Source | Impact | First Seen | Last Seen | |
|---|---|---|---|---|---|---|
| Loading... | ||||||
Security Threat Feed
Loading...
XDR Active Threats
Loading...
Auth Failure Leaderboard
Loading...
Top Blocked Domains
Loading...
Anomaly Events
Loading...
MSP Tenant Topology
-
Loading tenants...
Tenant Topology
-Loading topology...
Node Status
Online / OK
Warning / Degraded
Critical / Offline
Unknown
Node Types
ISP Exit / Breakout
LAN Gateway / WiFi AP
Agent (Endpoint)
MikroTik
FortiGate
SNMP Device
Ruckus VSZ
Ruckus AP
Switch
Probe
WG Hub / VPN
Service Target
Edge Types
ISP Uplink
WAN / WiFi Link
WireGuard Tunnel
VPN Overlay
SNMP Relay
Physical / WiFi
Probe Target
Node Details
Agents
Unknown Agent Staging
Unallocated Agents 0
Agents not yet assigned to any tenant
| Hostname | IP | Platform | Version | Status | Last Seen | Actions |
|---|
All Agents
| Hostname | IP | Platform | Version | Health | VPN | Services | Details | Last Seen | Actions |
|---|
Agent Identity & Enrollment
Per-agent permanent tokens and a per-tenant rotating enrollment token, replacing the old shared AGENT_TOKEN. "Legacy grace" agents haven't been issued a token yet; "pending adoption" agents have one but haven't reconnected with it — both are expected and safe during rollout.
| Hostname | Status | Identity State | Last Heartbeat | Actions |
|---|---|---|---|---|
| Loading... | ||||
Unauthorized Connection Attempts
Agents whose connection was rejected — a stuck token, a decommissioned/reimaged machine reusing an old hostname, or a genuinely new identity without a valid enrollment token. Every entry here has already raised a critical alert. Force Adopt clears the block (creating the agent under a tenant if it doesn't exist yet) so its next real connection is admitted normally; Dismiss clears the entry without adopting (e.g. a clearly unrelated probe from the internet).
No unauthorized connection attempts are currently open.
| Claimed ID | Reason | Tenant Hint | Source IP | First Seen | Last Seen | Attempts | Actions |
|---|
Agent View
—
—
—
v—
Unallocated
Overview
Metrics
Productivity
Software
Browser
Sessions
Events
Probes
Processes
Automation
Patches
Security
Firewall
Interfaces
Wireless Scan
Anomalies
Agent Health
Controller
Network Health
Storage
Loading...
Overview
Networking
CPU Usage
Memory Usage
Disk Usage
Network I/O
Metrics Trend
Speedtest
No recent speedtest results
Select an agent...
Select an agent...
Select an agent...
Resource Hog Processes
| Process | Avg CPU % | Max CPU % | Avg Memory | Max Memory | Samples | Category |
|---|
System Overview
Select an agent...
Alerts & Warnings
No alerts
Connection History
No connection events
Network Diagnostics
Select an agent...
Active Path Summary
Select an agent...
Network Interfaces
Select an agent...
Traffic Intelligence
Process attribution · Peer resolution · Last 24hSelect an agent...
Live Connections
Current connection snapshot · All processesSelect an agent...
Route Intelligence
Traceroute observations · Firewall detectionSelect an agent...
Browser ↔ Network Correlation
Browser visits matched to network connections via DNSSelect an agent...
Public IP & Network Identity
Select an agent...
Public IP History
Select an agent...
Select an agent...
Work Time Breakdown
Application Usage
No data
Website Usage
No data
Foreground & Background Apps (Live)
No process data
Category Breakdown
App Usage
Hourly Activity (click an hour for details)
Top Domains
Screenshots
Productivity Trend
Software Action Log
No action logs yet.
| Name | Version | Publisher | Install Date | Size | Type | Actions |
|---|
Visits
Top Domains
Performance
Errors
Request Traces
Interactions
Slow Requests
| Time | URL | Title | Domain | Duration | Browser |
|---|
| URL | Load | DCL | LCP | FCP | TTFB | CLS | Reqs | Errs | Tasks | Score |
|---|
| Time | Level | Type | Source | URL | Message |
|---|
Showing individual network requests captured per page visit. Data from raw_data (all extension versions) + dedicated trace table (extension 2.1+).
| Time | Type | Method | Domain | URL | Status | Duration | Size | Error |
|---|
| Last Seen | Domain | Element | Interaction | Hits | Avg Complete | Requests | Data Size | Detail |
|---|
Slowest Domains
| Domain | Avg Duration | Max Duration | Slow Count | Total Requests |
|---|
Slowest Endpoints
| URL | Avg Duration | Max Duration | Slow Count |
|---|
Login Sessions
Authentication Events
WebSocket Sessions
Active Sessions
These are currently open user logon sessions reported by the agent (interactive, remote, service). Entries update as agents report login/logoff state.
No active sessions
Sessions per Day
User Summary
Session Details
| Login | Logout | Type | Duration | IP | Status |
|---|
Top Source IPs
No authentication telemetry yet.
Users Under Pressure
No authentication telemetry yet.
Recent Authentication Events
Tracks successful logins, failed attempts, explicit credential use, logoff activity, and source IP telemetry reported by each agent.
| Time | User | Result | Type | Method | Source IP | Risk | Reason |
|---|
Agent WebSocket Sessions
| Agent | Connected | Disconnected | Duration | IP | Messages ↑↓ | Data ↑↓ | Version | Status |
|---|
| Time | Level | Type | Source | Event ID | Message | Actions |
|---|
Loading...
Agent Runtime & Reporting Overhead
Runtime usage details will appear here.
Process Analytics
ML Optimization Insights (This agent)
Model recommendations will appear here.
| Agent | Score | Risk | Recommendation | Top Reason | Primary Action |
|---|
Top CPU Consumers
| Process | Avg CPU | Max CPU | Samples |
|---|
Top Memory Consumers
| Process | Avg Memory % | Max Memory % | Samples |
|---|
Long-running / Persistent Processes
| Process | Samples | Avg CPU | Max CPU | Avg Memory % | First Seen | Last Seen |
|---|
| PID | Name | User | CPU % | Memory % | Status | Actions |
|---|
Standard Optimization Tasks
Custom Optimization Script
Saved Optimization Scripts
| Name | Description | Updated | Actions |
|---|
Automation Scheduling
Automation Activity Log
No automation logs yet.
Patch Gaps
| Software | Installed | Min Safe Version | Category | Severity | EOL / CVEs | Notes / Remediation | Actions |
|---|---|---|---|---|---|---|---|
| Loading... | |||||||
XDR Override:
XDR Threats
XDR is not enabled for this tenant.
| Severity | Type | Description | Process/Connection | Score | Detected | Actions |
|---|---|---|---|---|---|---|
| Loading... | ||||||
Security Scan History
| Date | Type | Findings | Open Ports | Vulnerabilities | Score |
|---|---|---|---|---|---|
| Loading... | |||||
Findings by Severity
Remediation Steps
Rules managed here are created/removed directly on this agent's Windows Firewall over its existing connection to the server. They're separate from any rules the OS or other software created, and the agent may also create its own rules automatically for specific features (e.g. the Storage Agent's local API port).
Managed Firewall Rules
| Name | Direction | Protocol | Local Port | Remote Scope | Action | Status | |
|---|---|---|---|---|---|---|---|
| Loading... | |||||||
Wi-Fi Signal (RSSI / Quality)
Throughput — RX (solid) / TX (dashed)
Gateway Latency (ms)
Packet Loss & Errors
VPN Session History
| Interface | Type | Endpoint | Connected | Disconnected | Duration | RX | TX | Avg Latency | Status |
|---|
Interface Activity Log
| Started | Interface | Network / SSID | Duration | RX ↓ | TX ↑ | Avg RSSI | Latency | Loss% | Change / Reason |
|---|---|---|---|---|---|---|---|---|---|
| Loading activity log... | |||||||||
No WiFi adapter on this device, or no scan data yet.
Live
History
Signal History —
Channel Recommendations
Channel Occupancy — 2.4GHz
Channel Occupancy — 5GHz
Channel Utilization — 2.4GHz
Channel Utilization — 5GHz
Nearby Networks
Click a row to view that network's signal history.
| SSID | BSSID | Vendor | Band | Channel | Signal | Security | |
|---|---|---|---|---|---|---|---|
| Loading... | |||||||
Known Access Points
| SSID | BSSID | Vendor | First Seen | Last Seen | Last Channel | Last Signal |
|---|---|---|---|---|---|---|
| Loading... | ||||||
Possible Interference
Connection Quality (the symptoms)
Wireless Environment (possible causes — line up with the chart above)
Larger red points mark time windows flagged as possible interference.
Channel & SSID Overlap — Date Range
Every distinct network seen anywhere in the selected range, at its strongest observed signal2.4GHz
5GHz
Channel Occupancy — 2.4GHz
Channel Occupancy — 5GHz
Nearby Networks Over Time
Individual Scans
Click a scan to view exactly what was visible at that point in time.
| Scanned At | Connected SSID | Channel | Band | Networks Seen |
|---|---|---|---|---|
| Pick a date range and click "Load History". | ||||
Historical Scan —
Channel Occupancy — 2.4GHz
Channel Occupancy — 5GHz
Channel Utilization — 2.4GHz
Channel Utilization — 5GHz
| SSID | BSSID | Vendor | Band | Channel | Signal | Security |
|---|
Critical
—
Warning
—
Total
—
Peak σ Score
—
Anomaly Events
| Metric | Severity | Observed | Baseline Mean | Std Dev | σ Score | Detected |
|---|---|---|---|---|---|---|
| Loading... | ||||||
Total Emtelle footprint: core agent, owned descendants, probes, reporting traffic, and managed WireGuard components. Endpoint-wide resources remain under Metrics.
CPU Impact by Ownership
Memory Impact by Ownership
Probe Processing
Waiting for impact telemetry...
Network & WireGuard Overhead
Waiting for impact telemetry...
Current Component Breakdown
| Component | CPU | Memory | Processes |
|---|
Owned / Managed Processes
| Ownership | Process | PID / Parent | CPU | RSS |
|---|
Accounting Coverage & Limitations
Waiting for impact telemetry...
Restart History
| When | Type | Reason | Previous Lifetime | Host CPU at Restart | Version |
|---|---|---|---|---|---|
| Loading... | |||||
Loading...
Loading...
Stack Role & Control
This node is currently:
Configuration & Control
DuckDB Warehouse Health
Mesh Links (Inter-Node Traffic)
| Peer | Status | Traffic |
|---|---|---|
| No mesh links for this node | ||
Query Performance (This Node)
| Time | Integration | Attempt | Result | Latency |
|---|---|---|---|---|
| No report calls logged yet for this node | ||||
Replication Activity (This Node)
| Time | Direction | Integration / Date | Transport | Result |
|---|---|---|---|---|
| No replication activity logged yet for this node | ||||
Group
Combined productivity across every machine in this group. Each machine still runs its own probes and reports its own data independently -- this view only merges the productivity picture.
Combined Productivity Trend
By Machine
| Machine | Productive | Unproductive | Neutral | Productivity % |
|---|
Top Applications (combined)
| Application | Category | Score | Time |
|---|
Agent Health
Version Distribution
Platform Distribution
| Hostname | Status | Version | Platform | Last Heartbeat | Connection Health | Uptime | Events (24h) |
|---|
Recent Connection Events
System Metrics
Overview
Networking
CPU Usage
Memory Usage
Disk Usage
Network I/O
Metrics Trend
Speedtest
No recent speedtest results
Select an agent...
Select an agent...
Select an agent...
Resource Hog Processes
| Process | Avg CPU % | Max CPU % | Avg Memory | Max Memory | Samples | Category |
|---|
System Overview
Select an agent...
Alerts & Warnings
No alerts
Connection History
No connection events
Network Diagnostics
Select an agent...
Active Path Summary
Select an agent...
Network Interfaces
Select an agent...
Traffic Intelligence
Process attribution · Peer resolution · Last 24hSelect an agent...
Live Connections
Current connection snapshot · All processesSelect an agent...
Route Intelligence
Traceroute observations · Firewall detectionSelect an agent...
Browser ↔ Network Correlation
Browser visits matched to network connections via DNSSelect an agent...
Public IP & Network Identity
Select an agent...
Public IP History
Select an agent...
Select an agent...
WireGuard Monitoring
Live interface health, peer handshakes, traffic flow, and self-heal recovery activity for managed WireGuard tunnels.
Aggregate Tunnel Traffic
Loading live WireGuard data…Recovery Loop
Loading self-heal status…
Managed Interfaces
Loading interface inventory…
Recent Recovery Events
Loading recovery events…
Interface Status Matrix
Loading interface matrix…
Processes
Agent Runtime & Reporting Overhead
Runtime usage details will appear here.
Process Analytics
ML Optimization Insights (All tenants / agents)
Model recommendations will appear here.
| Agent | Score | Risk | Recommendation | Top Reason | Primary Action |
|---|
Top CPU Consumers
| Process | Avg CPU | Max CPU | Samples |
|---|
Top Memory Consumers
| Process | Avg Memory % | Max Memory % | Samples |
|---|
Long-running / Persistent Processes
| Process | Samples | Avg CPU | Max CPU | Avg Memory % | First Seen | Last Seen |
|---|
| PID | Name | User | CPU % | Memory % | Status | Actions |
|---|
Installed Software
Software Action Log
No action logs yet.
| Name | Version | Publisher | Install Date | Size | Type | Actions |
|---|
Software Store & Deployment Templates
Store Packages
| Name | Source | Version | Installer | Tenant | Actions |
|---|
Deployment Templates
| Name | Packages | Auto | Actions |
|---|
Deployment Activity
| Time | Package/Template | Target | Status | Message |
|---|
Automation & Machine Optimization
Standard Optimization Tasks
Custom Optimization Script
Saved Optimization Scripts
| Name | Description | Updated | Actions |
|---|
Automation Scheduling
Automation Activity Log
No automation logs yet.
System Events
| Time | Level | Type | Source | Event ID | Message | Actions |
|---|
Productivity
Overview
Insights
Workforce
Licences
Work Time Breakdown
Application Usage
No data
Website Usage
No data
Foreground & Background Apps (Live)
No process data
Category Breakdown
App Usage
Hourly Activity (click an hour for details)
Top Domains
Screenshots
Productivity Trend
Coaching Recommendations
Loading...
Peer Benchmarks
Loading...
AI Executive Summary
Click Generate for a short AI-written narrative summary built from the statistics above (never raw activity data).
Executive Summary
Loading...
Schedule Adherence
Loading...
Licence Utilization
Loading...
Licence Records
Loading...
Add Licence
Reports
to
Agent Report
Tenant Report
Global Report
Probe Performance
Agent Technical Report
Vendor Intelligence
WLAN Performance
As-Build Report
Ruckus Usage & Health
Daily Activity
Hourly Breakdown
Top Applications
Top Domains
Application Sessions (Start/Stop Detail)
Connection Summary
Data Consumed
Daily Breakdown
Top Users
Top Applications
Top Domains
Daily Activity (All Agents)
Top Applications
Top Domains
Wireless & interfaces only:
Full report:
Overview
Availability
System
Network & WiFi
Probes
Events
Incidents
Security & Patch
Inventory
Connectivity Timeline
Outages
User Login Sessions
CPU & Memory Trend
Disk Usage
Top Resource-Consuming Processes
Live Process Snapshot
Process Terminations
WiFi Signal (RSSI)
Speed Test Trend
VPN Sessions
Live Connections
NIC Throughput
Connectivity Context
Network Configuration
What networks this device was connected to.
Public IP History
Wireless Environment
Passive scan of nearby SSIDs/channels — channel congestion and recommendations. Requires the Passive WiFi Scan tenant feature.
Probes That Degrade Together
Probe pairs whose problems repeatedly showed up within the same short window — a strong signal they share a common cause (same network path, same upstream target, same local link).
Hardware Inventory
Running Services
Startup Items
Agent Self-Health & Upgrades
Asset Register
Asset Changes & Anomalies
Software Store Deployments
| Time | Domain | Severity | Event | Message |
|---|
Events across different domains that happened close together in time are grouped into incidents below — the shaded band shows how far each incident spans across the affected areas. Click a band, dot, or card to see full detail.
Critical
Warning
Info
Open Patch / EOL Gaps
Acknowledged Patch Exceptions
XDR Scan Runs
Remote Access Sessions
Installed Software (current snapshot only — no install/uninstall history is tracked)
Single Probe
Selected Probes
Tenant
Global
Avg Primary / Secondary
Status Mix
Coverage / Staleness
Downtime / Event Pressure
Reporting Highlights
Probe Breakdown
Downtime Periods
Recent Probe Events
Read-only correlation between Ruckus Analytics and PRTG. The association model learns from repeated matches over time and only reads current inventory, dependencies, topology, and recent change data.
Matched Infrastructure
Dependency Highlights
Port / Config Exceptions
Recent Topology Changes
Topology Tree — every synced switch port, connected or not
Unmatched Ruckus Assets
Unmatched PRTG Devices
Per-WLAN Breakdown
KPIs above are combined across all selected WLANs. This table isolates each one.
RSSI Distribution
RSSI & Packet Loss Trend
Access Point Performance
Issue Summary & Event Counts
Client Sessions
Connection Events
Controller Alerts
Live AP Events
Client Sessions
| Client | MAC | IP | WLAN | AP | Zone | Status | Avg RSSI | Avg SNR | Packet Loss | Retry Rate | Duration | Issues | Started | Last Seen |
|---|
Connection Events
| Time | Event | Severity | Client | MAC | WLAN | AP | Zone | RSSI | Packet Loss | Retry Rate | Previous AP |
|---|
Controller Alerts
| Time | Type | Severity | Entity | Client MAC | Zone | Message |
|---|
Live AP Events (syslog feed)
| Time | Event | Client MAC | RSSI | AP | Zone | SSID |
|---|---|---|---|---|---|---|
| Load the report then select a WLAN to see live AP events. | ||||||
Select a controller and WLAN to generate the performance report.
Select a controller and one or more sites, then click Preview.
Recent Reports
Select a controller to see recent reports.
Activity Timeline
Select an agent and date
Privacy Exclusion Rules
Pattern-matched rules that skip screenshot capture and/or exclude URL tracking for matched activity -- e.g. banking domains, a password manager -- while general app/category/duration tracking continues unaffected for everything else. Applies on the agent the moment a rule is saved.
| Pattern | Type | Action | Applies To | Enabled | Notes | |
|---|---|---|---|---|---|---|
| Loading... | ||||||
Browser Activity
Visits
Top Domains
Performance
Errors
Request Traces
Interactions
Slow Requests
| Time | URL | Title | Domain | Duration | Browser |
|---|
| URL | Load Time | LCP | FCP | CLS | TTFB | Score |
|---|
| Time | Level | Type | Source | URL | Message |
|---|
| Time | Method | URL | Status | Duration | Size | Slow? | Error |
|---|
| Last Seen | Domain | Element | Interaction | Hits | Avg Complete | Requests | Data Size | Detail |
|---|
Slowest Domains
| Domain | Avg Duration | Max Duration | Slow Count | Total Requests |
|---|
Slowest Endpoints
| URL | Avg Duration | Max Duration | Slow Count |
|---|
Sessions
Login Sessions
Authentication Events
WebSocket Sessions
Active Sessions
These are currently open user logon sessions reported by the agent (interactive, remote, service). Entries update as agents report login/logoff state.
No active sessions
Sessions per Day
User Summary
Session Details
| Login | Logout | Type | Duration | IP | Status |
|---|
Top Source IPs
No authentication telemetry yet.
Users Under Pressure
No authentication telemetry yet.
Recent Authentication Events
Tracks successful logins, failed attempts, explicit credential use, logoff activity, and source IP telemetry reported by each agent.
| Time | User | Result | Type | Method | Source IP | Risk | Reason |
|---|
Agent WebSocket Sessions
| Agent | Connected | Disconnected | Duration | IP | Messages ↑↓ | Data ↑↓ | Version | Status |
|---|
Traffic & Filtering
Rules
Filters
Policies
Categories
Logs
| Name | Layer | Action | Priority | Enabled | Actions |
|---|
| Pattern | Type | Action | Category | Priority | Actions |
|---|
Filter Policies
Policies are evaluated top-down by priority. Default action is applied if no rule matches. Rules within a policy are evaluated in order (drag to reorder).
URL Category Groups
Manage groups of URLs/domains. Assign category groups to filter policy rules for bulk blocking/allowing.
| Time | Domain | URL | Action | Blocked | Rule |
|---|
Network Probes
0 selected
Deleting...
Critical Infrastructure
| Name | Category | Type | Target | Health | Coverage | Interval | Last Check | Enabled | Actions |
|---|
Probe Analytics
Check-in Summary
No data yet.
Poor Performance
No poor-performing agents in this period.
Sensors & Linked SNMP Context
No sensors yet.
Agent Performance
| Agent | Status | Latency | Loss % | Last Check | Next Check |
|---|
Latency
Packet Loss / Errors
Status Trend (Healthy / Warning / Error)
Type-Specific Detail
Select a probe to view detailed analytics.
Cross-Agent MTR Comparison
Devices
| Name | Tenant | Group | Primary Target | Associated Entities | Agents | Health | Actions |
|---|
Agents
Device
Probes
| Probe | Metrics | Status |
|---|
SNMP Devices
| SNMP Device | Metrics | Status |
|---|
Vendor-Managed (Ruckus VSZ / H3C Cloudnet)
| Device | Metrics | Status |
|---|
Recent Events
Create Device
Edit Device
Auto-detect Devices
Ungrouped probes and SNMP devices sharing the exact same target/host, proposed as candidate Devices. Uncheck any you don't want, edit the name, then create.
Link Existing
Probe Details
Network Scans
Total Scans
0
Completed
0
Hosts Discovered
0
Services Found
0
Probes Created
0
Scan History
Analytics
Discovery
| Date | Agent | Target | Type | Status | Hosts | Findings | Map | Probes | Actions |
|---|
Scan Trend
Severity Distribution
Top Discovered Hosts
| Host | Findings | Critical/High | Actions |
|---|
Select a completed scan to view discovered hosts and create probes from the results.
Scan Findings
| Severity | Host | Hostname | MAC / Vendor | Port | Service | Latency | Description | Recommendation |
|---|
ISP
New ISP visibility
Tunnel drill-down
Each MikroTik now exposes live tunnel, connected-node, latency, endpoint identity, and tx/rx monitoring from the Details and Config pages.
Safer lifecycle control
Save & Apply All is live, and Remove Control now defaults to cleaning router-side artifacts before deleting the managed record.
MSP Firewalls
FortiGate management is now available under the dedicated MSP Firewalls dashboard for inventory, live status, config control, and backups.
MikroTik Connection Methods
Direct API
Use RouterOS API / API-SSL when the server can reach the router directly. Best for static/public IP edges.
Agent Proxy
Use a LAN agent to proxy management behind NAT. The router host/IP should be reachable from that agent.
RouterOS Installer
Install the RouterOS scheduler script for telemetry. Add management credentials during generation if you also want backup, diff, restore, and config push from the UI.
Total Devices
0
Online
0
Offline
0
Installer Managed
0
14-Day Uptime History
Daily uptime percentages plus hourly blocks built from 5-minute MikroTik polling. Click any hour to inspect the exact outage intervals inside that hour.
Loading uptime history...
| Name | Connectivity | Status | RouterOS | LAN / WAN | Model | Last Seen | Last Backup | Last Log Sync | Actions |
|---|
Live Connectivity Topology
Secure hub, sites, and MikroTik nodes with WireGuard and applied topology links.
Loading topology…
Tunnel Performance
Real ICMP latency/loss to each active tunnel peer, polled every 5 minutes.
| Device | Assigned IP | Link | Config Status | Latency | Packet Loss | Last Observed |
|---|---|---|---|---|---|---|
| Loading… | ||||||
Applied Pairs
Every WireGuard tunnel or local route the Planner has applied. Removing one tears down the actual router config on both sides, not just this record.
| Site / Devices | Strategy | Status | Applied | Action | |
|---|---|---|---|---|---|
| Loading… | |||||
Branches
| Name | Description | Actions |
|---|
Sites
| Name | Branch | Domain | Location | Actions |
|---|
Auto Route & VPN Planner
Select branches, sites, or specific MikroTik devices. The planner only applies safe add-only changes: new static routes, new WireGuard peers/interfaces, and fresh backups before/after every topology change.
Uncheck a pair to exclude it from "Apply Selected". Keys are only generated when a pair is actually applied.
| Pair | Strategy | Planned Config | Findings | Action |
|---|
Select a MikroTik device above to see its connected WiFi clients, wireless interface setup, DHCP leases, and active PPP/VPN sessions.
| Device | Type | Hash | Created | Actions |
|---|
| Device | From | To | Changes | Created | Actions |
|---|
| Device | Time | Severity | Topics | Message |
|---|
| Device | Action | Details | Performed By | Time |
|---|
MikroTik Details
Select a MikroTik device from the ISP page.
Select a MikroTik device from the ISP page.
Performance Timeline
Tunnel & Topology Monitoring
No MikroTik device selected.
Recent Logs
| Time | Severity | Topics | Message |
|---|
Recent Backups
| Type | Hash | Created | Actions |
|---|
Audit Trail
| Action | Details | Performed By | Time |
|---|
Router Overview
No MikroTik device selected.
Network & Routing
No MikroTik device selected.
Router Probes
No MikroTik device selected.
Alerts
No alerts.
MikroTik Cloud & Network Config
Select a MikroTik device from the ISP page.
Cloud Management
Monitoring & Backup Policy
Router Settings
Live Tunnel Monitoring
No MikroTik device selected.
Probe Assignments
No MikroTik device selected.
Network Configuration
Inventory will appear after loading the latest backup snapshot.
No configuration inventory loaded.
Wireless
No MikroTik device selected.
Additional Configuration
No MikroTik device selected.
Monitoring Snapshot
No MikroTik device selected.
Routing & Tunnel Summary
No MikroTik device selected.
Recent Config Changes
No configuration changes loaded.
Recent Alerts
No alerts.
Zone / Domain Tenant Links
Assign which tenant actually owns each zone (fixes it being mapped to the wrong tenant), and optionally share a zone's devices with additional tenants for topology/map visibility only — sharing never changes who owns the devices, billing, or alert routing.
| Zone | Domain | APs | Owning Tenant | Shared With | |
|---|---|---|---|---|---|
| Select an integration above. | |||||
PRTG Configuration Backup
Structural configuration only (names, hosts, hierarchy, dependencies) — never monitoring/graph data. A new revision is recorded automatically whenever something actually changes. Restoring only creates what's missing (groups/devices); it never modifies or deletes anything already live in PRTG, and missing sensors/probes are listed for manual re-creation rather than guessed at.
REVISION HISTORY
| When | Objects | Changes | Trigger | |
|---|---|---|---|---|
| Select an integration above. | ||||
CHANGES IN THIS REVISION
EMERGENCY RECOVERY
Run a check to compare the selected revision (or the latest known state, if none selected above) against PRTG right now.
Edit Wireless Radio
Pick an existing security profile from the list, or type a new name to create one.
This is applied directly to the live radio and may disconnect currently-connected WiFi clients if misconfigured.
MSP Firewalls
FortiGate inventory and control entrypoint. Open a firewall to load the full dedicated details view for HA, WAN, hardware, VPN, backups, and audit.
Total Firewalls
0
Online
0
Error
0
Pending
0
Backups
0
14-Day Uptime History
Daily uptime percentages plus hourly blocks built from 5-minute FortiGate polling. Amber marks partial hours where telemetry degraded or recovered within the hour.
Loading uptime history...
FortiGate Inventory
Use FortiGate REST API auth with a token and optional PKI client certificate for the cleanest management path. Legacy username/password mode is also supported.
| Name | Connectivity | Scope | Status | Firmware | Last Seen | Last Backup | Actions |
|---|
Details Workflow
Click the details button on a firewall to open its dedicated operational view. That page loads the full FortiGate API-backed detail set for HA state, WAN links and IPs, interfaces, FortiSwitches, switch ports, FortiAPs, AP clients, VPN users, site tunnels, backups, diffs, and audit history.
FortiGate Details
Select a FortiGate device from MSP Firewalls.
Select a FortiGate device from MSP Firewalls to load full live status, interfaces, routes, backups, and audit history.
HA & WAN Overview
Select a FortiGate device to inspect HA, WAN links, and SD-WAN health.
Managed Hardware Inventory
FortiSwitch and FortiAP inventory will appear here once a device is selected.
Performance & Control Plane
CPU, memory, sessions, admin access, and routing neighbor telemetry will appear here.
Service & Fabric Inventory
DHCP, ARP, policy, SSID, and switch VLAN inventory will appear here.
VPN Users
| User | Group | Status | 2FA | Actions |
|---|
Site-to-Site Tunnels
| Tunnel | Peer | Status | Networks | Actions |
|---|
Recent Backups
| Type | Hash | Created | Actions |
|---|
Recent Config Diffs
| Compared | Summary | Created | Actions |
|---|
Recent Audit
| Action | Details | Performed By | Time |
|---|
Add FortiGate
Apply FortiGate System Settings
Add VPN User
Add Site-to-Site Tunnel
Add MikroTik Device
SNMP Monitoring
Poll routers, switches, APs, and other SNMP-capable devices for health/interface metrics, receive traps, and set threshold alerts. Discovered devices also feed the Maps page's Auto-Discovered Map.
No SNMP devices yet
Add a device manually if you know its IP/community string, or run a discovery scan across a subnet (CIDR) to find SNMP-capable devices automatically and import the ones you want to monitor.
Devices
Device Detail
Health
Poll Results
Analytics
Alerts
Traps
MIB Library
Discovery
Total Devices
0
Online
0
Offline
0
Traps (24h)
0
Active Alerts
0
Poll Errors
0
| Name | Host | Tenant | Port | Version | Vendor | Status | Attention | Last Activity | Actions |
|---|
Select a device to view its collected data.
Total Devices
0
Healthy
0
Degraded
0
Unhealthy
0
Unknown
0
Active Alerts
0
Traps (24h)
0
Latest Poll
-
Metrics Seen
0
Numeric Metrics
0
Changed Since Previous Poll
0
| Metric | Latest | Previous | Change | Updated |
|---|
UNREGISTERED TRAP SOURCES
| Time | Incident | Source | Severity | Context | Actions |
|---|
Data Points
0
Metrics Tracked
0
Time Range
-
First Poll
-
Latest Poll
-
| Metric | Current | Range | Average | Signal | Samples |
|---|
Alert Rules
| Device | Metric | Condition | Threshold | Severity | Cooldown | Enabled | Actions |
|---|
Recent Alerts
| Time | Incident | Device | Value | Severity | Status | Actions |
|---|
Upload vendor MIB files to enable human-friendly OID labels in traps and poll results. Built-in definitions for standard MIBs and Fortinet/MikroTik are always available.
Known OID Definitions
—
| MIB Name | Description / Module | Scope | OIDs | Loaded | Actions |
|---|---|---|---|---|---|
| Loading... | |||||
| Started | CIDR | Status | SNMP Devices Found | Actions |
|---|---|---|---|---|
| No discovery scans yet. | ||||
Discovered Hosts
| IP | sysName | sysDescr | Guessed Vendor | Guessed Type | Status | Actions |
|---|
Discover SNMP Devices
Pings every host in the given CIDR range, then probes SNMP-responsive hosts with the community string(s) below. Runs from the server, so the target subnet must be reachable from it (use a relay-capable device on that subnet if not).
Upload MIB File
Supported format: standard ASN.1 MIB syntax. The system extracts OBJECT-TYPE, NOTIFICATION-TYPE, and OBJECT IDENTIFIER definitions automatically.
Edit MIB
Add SNMP Device
Add Syslog Source
OID Profiles
Starter sets include researched defaults for MikroTik, Fortinet, Ruckus, Aruba, and Netgear, and you can add your own custom OIDs on top.
| OID | Name | Mode | Description / Unit | Actions |
|---|
Use this only if you want to paste raw JSON. Saving will validate and normalize it.
| Name | Vendor | Description | OIDs | Default | Actions |
|---|
Anomaly Events
Critical Anomalies
0
Warning Anomalies
0
Metrics Tracked
—
Last Baseline
—
Recent Anomalies
| Metric | Agent / Source | Severity | Observed | Baseline Mean | Std Dev | σ Score | Detected |
|---|---|---|---|---|---|---|---|
| Loading... | |||||||
Patch Gaps
Agents Scanned
0
Critical Gaps
0
Warning Gaps
0
Avg Patch Score
—
Fleet Patch Summary
| Agent | Patch Score | Critical | Warning | Info | Top Gaps |
|---|---|---|---|---|---|
| Loading... | |||||
Gaps —
| Product | Installed | Safe Version | Severity | EOL Date | Note |
|---|
Asset Register
Total Assets
—
Active
—
Removed
—
Open Anomalies
—
Assets by Type
Loading...
Recent Activity
Loading...
Click Compile / Refresh to populate the register.
Showing last 200 changes
| Time | Machine | Action | Asset | Category | Changed By | Summary |
|---|---|---|---|---|---|---|
| No history yet. Compile the register to start tracking changes. | ||||||
| Time | Machine | Type | Severity | Title / Description | Status | Actions |
|---|---|---|---|---|---|---|
| No anomalies detected. | ||||||
Remove Asset
Edit Asset
Team Pulse
Active Now
0
Idle
0
Offline
0
Avg Productivity Today
—
No agents found for this selection.
Work Patterns
Deep Focus Time
—
Collaboration
—
Focus Blocks
—
Multitasking Rate
—
switches/hour
Productive Time
—
Active Time
—
Active Time Breakdown
Hourly Activity Heatmap (time-of-day productivity pattern)
Daily Focus & Collaboration Trend
Top Focus Interrupters
Apps that most frequently broke focus blocks
No interruption data — all focus blocks completed cleanly.
AI Tool Insights
Tracks time employees spend in AI tools (ChatGPT, Claude, Cursor, Gemini, Copilot, Ollama, etc.) — no AI runs on this server.
Total AI Tool Time
—
AI Adoption Rate
—
% of active time
Users Using AI
—
Top AI Tool
—
AI Usage Trend
Top AI Tools
No AI tool usage detected in this period.
Adoption by User
| User / Host | AI Time | Adoption % | Top Tools | |
|---|---|---|---|---|
| Loading… | ||||
Storage Management
—
Total Managed
—
Tenants >Warning Threshold
—
Pending Storage Requests
Pending Storage Increase Requests
| Tenant | Requested By | Current Quota | Requested Quota | Reason | Submitted | Actions |
|---|---|---|---|---|---|---|
| No pending requests | ||||||
Tenant Storage Overview
| Tenant | Usage | Quota | Used | ETA to Cap | Auto-Clean | Last Scan | Actions |
|---|---|---|---|---|---|---|---|
| Loading... | |||||||
Data Retention Coverage
System-wide, not per-tenant: for each dataset, how far back the oldest record actually goes right now, versus what the retention policy promises.
| Dataset | Category | Oldest Record | Actual Days | Promised Days | Status |
|---|---|---|---|---|---|
| Loading... | |||||
Platform DB Performance
Platform-wide, not specific to the selected tenant — Postgres query statistics have no per-tenant tagging.
—
Database Size
—
Connections
—
Idle in Transaction
—
Waiting
Slowest Queries (by average time)
| Query | Calls | Avg Time | Total Time |
|---|---|---|---|
Most Frequent Queries
| Query | Calls | Avg Time | Total Time |
|---|---|---|---|
Tenant Detail
Quota (GB)
Warning %
Critical %
Clean Target %
Current Usage Breakdown
30-Day Usage Trend
Cleanup History
| Date | Trigger | Before | After | Rows Deleted | Duration |
|---|
Per-Table Breakdown
sizes are estimated
| Table | Category | Est. Size | Rows | Oldest | Newest | Last 1h | Last 24h |
|---|---|---|---|---|---|---|---|
Your Storage Usage
—
— quota
You have a pending request
Usage by Category
Request Storage Increase
Confirm Data Cleanup
This will permanently delete the oldest 20% of time-series data for this tenant. This action cannot be undone.
NOC Highlight Rules
Flash a widget when something matches, and optionally also send a real notification (with the same cooldown/flapping protection every other alert gets). Currently supports Agents, MikroTik, SNMP devices, and WAN/ISP Tunnels.
| Name | Source | Condition | Flash | Notify | Enabled | |
|---|---|---|---|---|---|---|
| Loading... | ||||||
Add Rule
Trigger when status is:
cooldown min
priority
Share Links
Anyone with a share link can view a live, read-only wallboard of this tenant's current layout -- no login required. No acknowledge/snooze/clear controls are ever shown on that page. Every link has a mandatory expiry; revoke one anytime to cut it off immediately.
| Name | Domain | Token | Views | Expires | Status | |
|---|---|---|---|---|---|---|
| Loading... | ||||||
Create New Link
Shown only once -- copy it now
Notifications & Alerting
Channels & Email
Alert Profiles
Priority Tiers
Alert Rules
Resource Overrides
Email Delivery
Global provider for alerts, account notifications, password resets, and scheduled reports.
Loading...
You control the route explicitly: only the selected primary/failover providers that are enabled will be used. Disabled providers can keep saved credentials without being used.
Your chosen port is preserved. Use Require STARTTLS for providers that encrypt on ports like 587 or 2525 after the initial SMTP handshake. Use Implicit TLS/SSL only when the server expects TLS immediately, commonly on port 465.
Notification Channels
| Name | Tenant Scope | Type | Enabled | Last Test | Live Delivery (24h) | Actions |
|---|
Alert Profiles
One profile per probe type, agent metric type, and SNMP trap category controls how alerting behaves for it: the cooldown between repeat notifications, whether a recovery is announced, and when a sensor that keeps flapping between healthy/breach gets flagged unstable instead of continuing to page you. Editing a row while a tenant is selected above creates a tenant-specific override; editing with no tenant selected changes the shared system default that every tenant without an override inherits.
| Category | Name | Cooldown | Flap Window / Threshold | Unstable Quiet | Notify on Recovery | Scope | Actions |
|---|
Unstable Sensors
Entities that crossed their profile's flap threshold — repeatedly breaching and recovering within the flap window — instead of continuing to alert on every cycle. Review the threshold for these or investigate what's causing the flapping.
| Entity | Category | Transitions | Became Unstable | Last Transition |
|---|
Alert Priority Tiers
Platform-wide priority grouping (P1 most critical → P4 least critical) controlling cooldown/flap sensitivity for every alert type. Vendor-managed, applies across all tenants; a tenant-specific override in Alert Profiles still takes precedence over its tier if one exists.
Type Assignments
Which tier each alert type belongs to. Pick a tier, then click Save on that row.
| Alert Type | Category | Tier | Action |
|---|
Alert Rules
| Name | Type | Threshold | Window | Scope | Enabled | Actions |
|---|
Resource-Specific Overrides
Give one specific agent, probe, or device its own alert thresholds -- everything else keeps using the tenant/system default.
Loading...
Template Library
Create as many named templates as you want, switch between them, or share one with another tenant -- top-level MSP down to a client, or between any two tenants.
Loading...
Create New Template
Share Template
Paste the target tenant's ID (visible in tenant management). "+ descendants" also covers any of that tenant's current/future child tenants.
Customize NOC Layout
Drag to reorder. Uncheck to hide a panel.
Add Widget
Pick a widget type and point it at any data source -- network or security, this tenant's actual live data.
Preview
Add Rotation Widget
Cycles through the sources you pick, showing each one's overall status -- jumps to and holds on any source currently critical instead of carouseling past it.
Dwell time per source:
sec
Table Trend
No history yet — this table gets a data point on each 6-hourly storage scan. Check back after the next scan.
Storage Agents
A Storage Agent is a machine you control that becomes an external storage node for a tenant's historical reporting data -- reached only over a dedicated WireGuard tunnel. Once attached, historical report requests beyond the current day are answered by the agent itself instead of the shared database, addressing both data-sovereignty and compute-load concerns. Up to 3 agents per tenant.
Select a tenant from the tenant selector at the top of the page
Tenant Detail
Overview
Cluster
Replication
Query Performance
Offload
Retention & Tiering
Storage Tunnel
Storage Agents (0/3)
Deploy a New Storage Agent
Run this on the machine you want to become a storage agent for this tenant. It installs the Telemetry service plus a dedicated Storage service (local warehouse, WireGuard tunnel back to this dashboard). Once it registers, it'll appear in the "Select a storage-role agent" list above to attach.
Move Warehouse --
The current warehouse is copied to the new location and verified (real row counts compared) before anything is removed from where it is now -- new writes are held off only for the brief window this takes, existing data is never at risk even if the process is interrupted partway through.
Loading available disks…
| Agent | Assigned IP | Tunnel Status | Handshake | Traffic | DuckDB | Capacity Limit | Actions |
|---|---|---|---|---|---|---|---|
| No storage agents attached yet | |||||||
Every healthy stack member holds a full replica of this tenant's data; the elected leader is the single point every new write lands on before replicating out to the rest. Report reads still spread across every healthy member regardless of leadership.
Leader
—
Nodes
| Agent | Role | Tunnel Status |
|---|---|---|
| No storage agents attached yet | ||
Mesh links -- direct agent-to-agent replication tunnels between stack members
| Pair | Status | Last Handshake | Traffic |
|---|---|---|---|
| No mesh links yet | |||
Auto-tiering proposals -- rebalancing suggestions between over- and under-capacity stack members
| Move | Integration / Range | Status | Reason | Actions |
|---|---|---|---|---|
| No rebalance proposals yet | ||||
What data each stack member actually holds right now, from each node's own self-reported DuckDB health. A node with a lower row count or an older "newest data" date than its stack-mates is behind.
| Agent | Daily Rows | Monthly Summary Rows | Integrations | Data Held | Last Reported |
|---|---|---|---|---|---|
| No storage agents attached yet | |||||
Recent Replication Activity
Every individual push from the node that received original data out to each of its stack-mates, and how it got there.
| Time | Source → Target | Integration / Date | Transport | Result |
|---|---|---|---|---|
| No replication activity logged yet for this tenant | ||||
Report requests routed through each node over the last 24 hours, and the most recent individual attempts (a request can try more than one node if the first fails).
| Time | Integration | Attempt Path | Result |
|---|---|---|---|
| No report calls logged yet for this tenant | |||
Daily compacted rollup pushes from Postgres to this tenant's storage agent over the last 7 days, and the most recent individual push attempts.
| Time | Agent | Integration | Day | Rows | Result |
|---|---|---|---|---|---|
| No offload activity logged yet for this tenant | |||||
Retention Policy
Enforced nightly on every storage agent's own local warehouse. Data older than the rollup window is collapsed into permanent monthly summaries (per-client detail dropped, totals kept) -- never a raw delete unless a purge window is also set.
Manual Rebalance
Move one agent's older data to another right now, instead of waiting for (or in place of) the auto-tiering recommender -- same confirmed-safe mechanism (the target's copy is verified before anything is removed from the source).
DB Monitoring
Monitor a customer's own SQL Server, MySQL, or PostgreSQL database -- connectivity, performance, backups, replication health, slow queries -- relayed through an existing Trace agent on the same network as the database server. No separate install needed; assign the resulting probe to any already-connected agent that can reach it.
Credentials
| Label | Engine | Host | Username | Added | Last used | |
|---|---|---|---|---|---|---|
| Select a tenant from the tenant selector at the top of the page | ||||||
Database Probes
| Name | Engine | Target | Status | Coverage | Last Check | Actions |
|---|---|---|---|---|---|---|
| Select a tenant from the tenant selector at the top of the page | ||||||
Syslog
Sources
0
Events (window)
0
High Severity (0–3)
0
Blocked / Denied
0
Bandwidth (window)
—
Unique Hosts
0
Active brute-force activity detected
Client Connects
0
Client Disconnects
0
VPN Sessions
0
Failed Admin Logins
0
Failed VPN Logins
0
Recent Client & VPN Activity
| Time | Event | Client / User | SSID / Type |
|---|---|---|---|
| No connection activity in window | |||
Recent Failed Logins
| Time | Target | User | Source IP | Reason |
|---|---|---|---|---|
| No failed logins in window | ||||
Event Types
| No data in window |
Actions
| No data in window |
Top Talkers
| Client | Events | Traffic |
|---|---|---|
| No data in window | ||
Top Destinations
| Destination | Country | Events |
|---|---|---|
| No data in window | ||
Syslog Sources
| Source IP | Name | Hostname | Port | Parser | Format | Events (24h) | Last Seen | Actions |
|---|---|---|---|---|---|---|---|---|
| No sources detected | ||||||||
Recent Events
| Time | Source | Sev | Type | Action | Hostname | Message | |
|---|---|---|---|---|---|---|---|
| Loading... | |||||||
Syslog Event Detail
NetFlow & sFlow
Devices Reporting
0
Total Flows
0
Total Bytes
—
Total Packets
0
Top Talkers
| Source IP | Dest IP | Port | Proto | Bytes | Packets | Flows |
|---|---|---|---|---|---|---|
| Loading... | ||||||
Device Stats
| Device IP | Protocol | Flows | Bytes |
|---|---|---|---|
| Loading... | |||
Recent Flow Records
Latest 100| Time | Device | Proto | Src IP | → Dst IP | Port | IP Proto | Bytes | Packets |
|---|---|---|---|---|---|---|---|---|
| Loading... | ||||||||
Network Security
Security Centre (Phase 1)
Enable supplemental controls for endpoint security posture tracking (policy + telemetry surfaces).
Endpoint Trust & AV Hardening
AV hardening profile not configured.
No Security Centre modules enabled.
Posture Summary
Findings Trend
Scan History
| Date | Agent | Target | Type | Status | Findings | Actions |
|---|
Scan Findings
| Severity | Type | Host | Port | Service | Description | Recommendation |
|---|
XDR / AV Threat Detection
Enabled
XDR / AV detection is disabled for this tenant. Enable it in Settings to start real-time threat monitoring.
| Severity | Type | Description | Agent | Process/IP | Score | Status | Detected | Actions |
|---|
No threats detected in the selected time window.
XDR Analytics
Remote Access
Remote modes: direct-connect and relay (control plane). Use relay when operator routing to endpoint network is blocked by NAT/firewall. Relay mode requires inbound TCP reachability to the relay port shown for the session (default range 47000-47999).
Remote Sessions
| Agent | Type | Target | Status | Started | Duration | Data | Actions |
|---|
Notifications
Chat
Select a chat to get started
New Chat
Tickets & Tasks
Open
Assigned to Me
Tasks
All
| Title | Tenant | Status | Priority | Assignee | Updated | |
|---|---|---|---|---|---|---|
| Loading… | ||||||
New Ticket
Ticket
Alerts
Active
Archived
Active Alerts
| Time | Severity | Agent | Type | Message | Status | Actions |
|---|
Page 1
Alert Management Rules
| Name | Action | Types | Similar | Scope | Status | Actions |
|---|
Deployment
Deploy Script
Windows
Linux
macOS
Info
The script will download and install the Trace agent, configure it to connect to this server, and install it as a system service.
- Downloads agent package from this server
- Installs Node.js if not present
- Configures connection to server
- Installs as a system service
- Sets up tags & department
Windows Installer (EXE)
Download the standalone Windows installer. It is now preconfigured with the current server URL and shared agent token when available, so admins can click through without retyping connection details.
Trace Remote Desktop (custom client)
A fully rebranded, self-hosted-relay remote desktop client. Install is manual: download the exe below and run it on the target machine. Once installed, an agent prefers this client over the auto-installed one and falls back to it automatically if it's missing.
Agent Upgrades
Upgrade Filters
Packages
| Version | Platform | Size | Published | Auto-update |
|---|
Trigger Upgrade
Bulk Rollout
Stage a phased upgrade across many agents in batches. Creating a rollout only stages the plan — nothing is sent to any agent until you explicitly release each batch below.
New Rollout
Loading agents...
This targets every agent in the system — the widest possible scope.
Existing Rollouts
| Version | Scope | Progress | Agents | Status |
|---|
Rollout
| Agent | Batch | Status | Started | Completed | Error |
|---|
Scheduled Upgrades Queue
| Agent | Target Version | Scheduled | Status | Last Update | Error Log | Actions |
|---|
History
| Agent | From | To | Status | Triggered | Completed | Error Log |
|---|
Extension Versions
| Agent | Browser | Version | Last Reported | Status |
|---|
Extensions & Downloads
Browser Extension
Monitor browsing activity, page performance, Core Web Vitals, and JS errors.
To install: Open your browser extensions page (Edge/Chrome/Brave/Opera/Firefox), enable Developer Mode, then drag-and-drop the .zip or load unpacked.
Windows Agent Latest
Endpoint monitoring agent for Windows with system metrics, processes, events, WireGuard VPN support and more.
Download Latest AgentLinux Agent Latest
Endpoint monitoring agent for Linux servers and workstations.
Download Latest AgentBrowser Extension Setup
- Download the browser extension zip file above
- Extract the zip to a folder
- Open your browser's extension page (
edge://extensions,chrome://extensions,brave://extensions,opera://extensions, orabout:debuggingfor Firefox) - Enable Developer mode (toggle in top-right)
- Click Load unpacked and select the extracted folder
- The extension will auto-read server URL and agent ID from the local Trace Agent when available
- If auto-config is unavailable, configure server URL manually:
- The extension will begin sending browsing data to this server
Push Install via Agent (WebSocket)
Send the browser extension to connected agents for automatic install or update. The agent downloads the latest package, reapplies browser policy, and refreshes extension config defaults.
Bulk Push Install
Browser Extension Coverage
Track which agents have supported browsers installed, which browser extensions are reporting, and where browsing telemetry has gone stale or missing.
| Agent | Browser | Installed | Extension | Last Live Data | Last Local History | Last Install | Status |
|---|
Extension Install Results
Live endpoint install outcomes, including skipped browser reasons and policy/configuration errors.
| Time | Agent | Browser | Status | Message | Error |
|---|
Domain Management
Domains
Certificates
Cutover
Reporting Domains
Nginx Managed Domains
Add domains to automatically issue Let's Encrypt certificates and configure nginx for agent/dashboard access over any domain. Tag each domain with the services that depend on it, and use the Cutover tab to move agent telemetry between domains safely.
| Domain | Type | Services | Certificate Path | Cert Expiry | Status | Actions |
|---|
Internal TLS Certificates (advanced)
Certificates used by the Node.js HTTPS server directly. For production deployments behind nginx, the Domains tab above is preferred — this is a separate, independent certificate system kept for internal/dev use.
| Domain | Issuer | Valid From | Valid To | Status | Actions |
|---|
Domain Cutover
Move agent telemetry from one domain to another without losing fleet visibility. The old domain is never removed until you explicitly decommission it — every stage before that is reversible.
| From | To | Scope | Stage | Status | Updated | Actions |
|---|
Cutover run
| Agent | Status | Connected Domain | Channel | Pushed | Confirmed |
|---|
Tenant Reporting Domains
Which domain each tenant's and sub-tenant's agents report to. A sub-tenant with no override inherits its parent's domain, shown below. Use the panel beneath to set the primary/secondary domain for all or selected tenants at once.
| Tenant | Primary Domain | Secondary Domain | Override | Actions |
|---|
Set Primary / Secondary Domain
Tenants
All Tenants
Tenant
Overview
Hierarchy
Location
WireGuard VPN
Productivity
Agents
Notifications
These tenant entitlements control which features are allowed to capture data, deploy tools, or operate for this customer.
These permissions cap what tenant-scoped users in this tenant can see or change, including individual settings tabs, without disabling the licensed platform capability itself.
Sub-Tenants
Location & Address
Loading WireGuard configuration...
Configure agent-side idle detection threshold and productivity nudge notifications. These settings are pushed to agents on next sync.
Targets used for workload balance and benchmark calculations for this tenant.
Productivity and browser data is only stored during these windows (UTC). Use duplicate to copy one day block to multiple days.
Archives active alerts once they are older than this tenant window.
Per-agent overrides still take precedence over these tenant defaults.
Probe/SNMP/Wi-Fi monitoring and alerting stay exactly as they are either way. This only changes which notifications this tenant receives: individual probe/SNMP/Wi-Fi alerts (default), or one rolled-up alert per Device instead.
Use larger values to reduce endpoint load. Per-agent interval overrides still take precedence.
Assigned Agents
| Hostname | IP | Status | WireGuard | Last Seen | Actions |
|---|
Notification Medium Policy
Controls which delivery mediums are allowed per notification category for this tenant. A medium disabled on a parent tenant is locked for this tenant and every tenant beneath it — it cannot be re-enabled here.
in_app notifications cannot be disabled tenant-wide, only by the individual user.
| Category | |||||||
|---|---|---|---|---|---|---|---|
| Loading… | |||||||
Select a tenant to view details
Billing
Platform MRR
—
Billed Tenants
—
Storage Rates
—
Top-Level Tenants (MRR includes full sub-tenant subtree)
| Tenant | Plan | Sub-tenants | Seats | Agents | Probes | MRR |
|---|
Tenant
Recent History
| Date | Plan | Agents | Probes | Total |
|---|
Select a tenant to view its cost breakdown
Edit Billing Rates
Users
| Username | Name | Role | Scope | Tenant | Sensitive Data | Status | Created | Last Login | Actions |
|---|
Permission Groups
Built-in + custom groups govern user access when "Use Permission Group" is on for a user| Name | Base Role | Scope | Type | Permissions | Actions |
|---|
Settings
Productivity Rules
URL Categories
Performance Thresholds
Health Thresholds
WireGuard VPN
Compliance
Two-Factor
Access Logs
Scheduled Reports
Speedtest
White Label
MCP API Keys
Productivity Rules
| Pattern | Category | Score | Actions |
|---|
URL Categories
| Pattern | Category | Actions |
|---|
Domain Detail View
| Domain | Visits | Last Seen | Category | Actions |
|---|
Performance Thresholds
Configure thresholds for browser performance monitoring. Requests exceeding these thresholds will be flagged.
Health Threshold Templates
Configure agent health scoring thresholds per tenant. Each tenant has a default template. Individual agents can override with custom templates.
| Tenant | Name | CPU Warn/Crit | Mem Warn/Crit | Disk Warn/Crit | Default | Actions |
|---|
WireGuard VPN
Configure WireGuard VPN tunnel per tenant. Agents will automatically receive and apply their peer configuration. Requires WireGuard installed on server and agents.
Select a tenant (top-right) to configure WireGuard VPN.
Compliance & Data Minimization
Manage consent records, minimization posture, and DSAR workflows per tenant.
Select a tenant below to manage compliance scope.
Minimization Posture
No tenant selected.
Upsert Consent Record
Tip: Subject ID is auto-filled from selectors and remains editable for advanced cases.
Consent Records
| Subject | Purpose | Given | Legal Basis | Recorded | Expires | Actions |
|---|
DSAR Requests
| ID | Type | Status | Scope | Requested | Processed | Actions |
|---|
Pilot SLO Snapshot (30-Day Reliability Pilot)
Captured automatically once per day; select a tenant above to view its trend. Reconnect p95 and report p95 generation time aren't shown here -- neither is instrumented yet.
Select a tenant to view its pilot metrics.
| Captured | Heartbeat | Open Incidents | Critical | Upgrade Completion (30d) | Consent Records | Exclusion Rules | Notif. Failure (24h) |
|---|
Two-Factor Authentication
Two-Factor Authentication (Authenticator App)
Loading...
Use any TOTP-compatible authenticator app (Google Authenticator, Microsoft Authenticator, Authy, 1Password).
Add this secret to your authenticator app:
Access Security & Audit Logs
Activity Heatmap —
Less More
| Time | User | Action | Result | Channel | Method | Path | Remote IP |
|---|
Scheduled Reports
| Name | Type | Schedule | Enabled | Last Run | Actions |
|---|
Speedtest Orchestration
The scheduler enforces the global minimum interval and caps concurrency. Tenant/sub-tenant overrides and per-agent overrides can disable tests or increase intervals, but they cannot go below the global minimum.
Queued manual runs still respect active tests and effective intervals.
Override surfaces
Use the tenant detail panel for tenant/sub-tenant policy overrides and the agent reporting modal for endpoint-specific overrides.
Loading...
White Label / Branding
Customise the software name, logo, and favicon. Changes apply instantly for all users without a server restart.
Displayed in the sidebar, login page, browser tab title, and PWA name.
Shown below the software name in the sidebar and login page.
Used in copyright/footer lines. Leave blank to reuse the Software Name.
Shown on generated documents (e.g. the sales brochure) and public-facing pages.
Contact address shown on generated documents.
Live Preview
emtelle analytics
Endpoint Management
Favicon preview:
Browser tab icon
Logo Image
Recommended: 128×128px or larger, PNG or SVG with transparent background. Max 4MB.
Current Logo
Default (icon.png)
Favicon
Recommended: 32×32px or 64×64px PNG or ICO. Shown in browser tabs and bookmarks. Max 1MB.
Current Favicon
Default (icon.png)
MCP API Keys
Keys for external AI systems (ChatGPT, etc.) to pull data from this platform over MCP. Every key is read-only — it can never change configuration or data, only read it. A key is issued as a specific user and can only ever see what that user can see; it is never a separate, broader identity.
Connection details
Server URL:
—Auth: HTTP header
Authorization: Bearer <key> (shown once when a key is created)| Name | User | Key | Created | Expires | Last Used | Status | Actions |
|---|
Map View
Tenant
Agent
MikroTik
SNMP
Probe
0 nodes • 0 online • 0 offline
Node Details
Vendor Integrations
Ruckus Analytics
PRTG
H3C Cloudnet
Ruckus Analytics
Loading vendor integrations...
Read-only SmartZone analytics for controller health, WLAN usage, switch visibility, device connection history, RF quality, packet-loss-aware incidents, and client issue tracking by domain, zone, AP group, and WLAN.
No Ruckus VSZ controllers configured
Add a tenant-scoped SmartZone controller to start collecting AP inventory, switch visibility, client connection history, signal quality metrics, trace/audit events, and derived health or incident analytics.
Health Trends
RF / Capacity Trends
Top Zones & WLANs
Loading...
Client Issue Summary
Loading...
Top Access Points
Loading...
Top Applications last 24h
Loading...
Most Active Clients last 24h
Loading...
Connection Activity
Incident Breakdown
Loading...
Top Problem Areas
Loading...
Switch Topology
Loading...
Port Mismatches
Loading...
Recent Topology Changes
Loading...
Device Assignment & Status History
AP and switch zone, group, and status moves detected on each sync — the same history shown when you drill into an individual device, surfaced here fleet-wide.
Loading...
Domains
Loading...
Zones
Loading...
AP Groups
Loading...
WLANs
Loading...
Discovered Switches
Loading...
Notification Dependencies
Auto-derived from the LLDP topology graph (same data as the Topology tab). When a switch is down, notifications for it and everything downstream of it (its directly-connected APs, and — where switches are cabled together — anything beyond them) are suppressed so one root cause doesn't flood you with dependent alerts. The switch itself still notifies normally; only its dependents are held back, and only while it stays down. Every switch's incident/status history is unaffected — this only withholds the notification, never the record.
Loading...
Dependency Tree
Every switch and its full downstream chain — APs and, where switches are cabled together, further switches beneath them. Down and currently-suppressing branches start expanded; everything else starts collapsed so a large fabric stays scannable.
Loading...
AVC Application Coverage
AVC catalog + policy coverage (not per-visit telemetry)
Loading application reporting notes...
WLAN Visibility Coverage
Loading...
AVC Policies
Loading...
Referenced Categories
Loading...
Referenced Applications
Loading...
Access Points
Loading...
Switch Inventory
Loading...
Wired Clients & Equipment
Loading...
Connected Clients
Loading...
Client Session History
Loading...
Device Trace & Audit
Loading...
Incidents
Loading...
Operational Events
Loading...
Application/website usage below requires two things configured on the Ruckus
controller: an Application Policy applied to the WLAN (Firewall
Options → Application Recognition and Control) and AP syslog forwarding
enabled at the zone level pointed at this platform. Neither is on by default.
Application Usage
Range: Last 24 hours (set above)
AI & Academic App Traffic
Traffic Trend
(daily totals, up to yesterday)
Top APs by Traffic
(live window only, up to 24h)
Top APs by Client Count
(live window only, up to 24h)
Usage by Site
Click a site to filter the tables below to it
Loading…
Top Applications & Websites
Loading…
Client Breakdown
Loading…
Connection Activity (fallback)
Derived from AP flow records (source/destination IP, port, protocol) rather than the
controller's application-recognition (AVC) engine — useful when little or no data
appears above. Connection counts, not byte-accurate usage; destinations are labeled by
port/protocol (e.g. "HTTPS") rather than by app name.
Top Services
Loading…
Client Breakdown
Loading…
PRTG
Loading PRTG integrations...
Read-only PRTG inventory for probes, device trees, dependency chains, and failing sensors so network topology, reporting, and cross-platform infrastructure mapping can be correlated with the Ruckus data model.
No PRTG servers are configured for this tenant yet.
Where This Data Is Used
Vendor Intelligence Report
Cross-vendor correlation with Ruckus Analytics: matched devices, dependency chains, problem sensors.
Open Reports →
Migrate to Native Monitoring
One-time copy into this platform's own probes/SNMP devices/Devices, further down this page.
Jump to tool ↓
Not connected yet
PRTG has no presence on the World Map/topology view, and PRTG sensor status doesn't drive any alert or notification today. Both are real gaps, not hidden features.
Sync Scope
Loading...
Group Mapping
Loading...
Ruckus Correlation (for topology matching)
Maps PRTG groups to Ruckus zones/domains so network topology and as-built reports can cross-reference the two data sources. Not related to tenant billing/access -- see Group Mapping above for that.
Loading...
Probes
Loading...
Dependencies
Loading...
Devices
Loading...
Problem Sensors
Loading...
Separate tool, same PRTG data
Migrate to Native Monitoring
Read-only against PRTG -- this only ever reads the inventory already synced above and writes to your own probes/SNMP devices/probe groups/Devices. Nothing on the PRTG server is ever changed or deleted. Map each PRTG group/device to a probe group first (or create a matching one), then migrate its sensors.
Step 1 — Map Groups/Devices
Step 2 — Migrate Sensors
H3C Cloudnet
Loading Cloudnet integrations...
Scoped to a single site -- the trend chart above stays account-wide (trend history isn't captured per site), everything else on this page is filtered.
H3C's cloud-managed wireless platform (site/AC/AP inventory, SSID config and membership, live & historical wireless clients, guest history, radio/GPS detail, and device traffic). Polled in rate-limit-aware tiers rather than one full snapshot per cycle -- the H3C API caps site-list/historical-client calls at 100/day and most device-detail calls at 1/sec. Live client signalStrength (dBm) and rates are included in health and troubleshooting; H3C does not expose SNR, retry/packet-loss, switch-port, or per-application telemetry through this API, so use SNMP/flow monitoring for those layers.
No H3C Cloudnet accounts are configured for this tenant yet.
Overview
Health
Devices
Access Points
SSIDs
Clients
Sessions
Guest Analytics
Sites & Tenant Mapping
Health & AP Availability Trend
Device Traffic Trend
Recent Events
Loading...
Health Score Drivers
Loading...
AP/AC Events
Loading...
Access Controllers / Routers
Loading...
Access Points
Loading...
Client Observations
Current and last-known per-device association, radio, signal, rate, traffic and packet detail. Use Timeline for all stored sessions associated with a client MAC.
Loading...
SSID Configuration & Membership
Read-only WLAN configuration plus the latest independent H3C SSID-to-client-MAC verification.
Loading...
Client Sessions
Association history with AP, SSID, IP, vendor, start time and observed duration. H3C currently returns no disconnect timestamp or historical signal/traffic counters; use Timeline for current radio detail and all stored observations for a client.
Loading...
Guest Analytics is off for this account. It draws on a separate H3C endpoint family with no documented rate limit, so it's opt-in per integration rather than on by default.
Site Rankings
Top/bottom 5 sites by client count and by traffic, across the whole account.
Loading...
Guest Analytics by Site
New vs. returning visitors, average dwell time, and top device vendors per site (most recent snapshot per site). Use Drill down for hourly/daily trends, visit frequency, dwell distribution, SSID/vendor breakdowns, traffic and day/week/month reports.
Loading...
Sites
Map each Cloudnet site (shop) to a tenant. Unmapped sites fall back to this integration's own tenant.
Loading...
About & Compliance
Trace
Release —Trace is a self-hosted MSP platform that monitors, secures and manages every endpoint and network you look after — from one console. It unifies endpoint health, productivity analytics, network probes, flow and SNMP telemetry, multi-vendor device integrations, remote access and software management, with true multi-tenancy so each client sees exactly what they should.
Platform Components
| Server | Node.js / Express / PostgreSQL | — |
| Agent | Cross-platform monitoring service | — |
| Extension | Browser MV3 (Chrome/Edge/Brave) | — |
Support & Resources
| Product brochure | Download PDF |
| Technical reference | Download PDF |
| Support | — |
| Website | — |
Technical Reference Document
v1.5.4
Comprehensive technical documentation covering all platform features, architecture, security model, compliance controls, and deployment guide. Available for download in PDF and DOCX formats, or view inline below.
Feature Categories
System Monitoring
Process Management
Productivity
Browser Analytics
Network Probes
Traffic Filtering
ISP/MikroTik
SNMP
Remote Access
WireGuard VPN
Alerting
Multi-Tenancy
RBAC
Compliance
Technical Reference — Inline Viewer
Formal Security & Compliance Position
Trace enforces secure-by-default controls for identity, tenant isolation, encrypted transport, auditability, data minimization, and consent-aware sensitive tracking.
Security Controls
- TLS-secured transport for dashboard/API/WebSocket channels.
- Role-based access control with per-feature full/read-only/hidden modes.
- Tenant-scope enforcement to prevent cross-tenant access paths.
- Authentication hardening with lockout and rate limiting.
- Mutation audit logging for operational and compliance traceability.
Privacy & Compliance Controls
- Consent-aware minimization clamps for sensitive capture (keystrokes/screenshots).
- Tenant/agent consent lifecycle management (record, revoke, expiry).
- DSAR workflows for export/delete requests with controlled processing.
- Retention and minimization policies applied to telemetry and media data.
- Operator-facing compliance workflows in Settings → Compliance.
Downloadable Documentation
Download formal documentation for security posture, privacy controls, compliance mapping, and full technical reference.
| Document | Description | Format | Action |
|---|---|---|---|
| Technical Reference | Complete platform documentation — architecture, features, security, deployment, and API reference. | PDF / DOCX | |
| Sales Broadsheet | Capabilities, plan comparison, pricing/billing tables, and worked cost examples for prospects. | PDF / DOCX / XLSX | |
| Technical Broadsheet | Architecture, stack, security/governance, tenant-inheritance model, and pricing/billing tables for technical evaluators. | PDF / DOCX / XLSX | |
| Security & Compliance Statement | Platform security model, control coverage, and operational safeguards. | TXT | |
| Privacy & Data Protection Policy | Data handling, lawful basis, minimization, retention, and subject-rights operations. | TXT | |
| Compliance Control Matrix | Control-to-regulation mapping (POPIA/GDPR/ISO27001-aligned control families). | CSV | |
| Endpoint AV Hardening Guide | Compliant endpoint anti-malware posture (code-signing, allowlisting, trusted paths, transparent service behavior). | TXT |
Traffic Rule
URL Filter
Network Probe
Selecting a profile applies its standardized config and agent template on save.
If set, only agents in this tenant can be assigned.
Notification Configuration
Route probe and sensor alerts through saved Slack, Teams, webhook, email, or SMS channels.
e.g. "2xx", "200,201", "200-299"
No credentials yet? Manage DB Monitor Credentials
Thresholds
Probe Sensor
Recent Readings
No readings loaded.
| Time | Agent | Value | Status |
|---|
Assign Targets to Probe
Probe Profiles
Profiles standardize probe config, thresholds, alerts, and agent templates.
| Name | Tenant | Type | Category | Agents | Actions |
|---|
Probe Profile
These agents are applied when the profile is linked to a probe.
Notification Configuration
Thresholds
Bulk Edit Probes
Apply a profile, adjust common config, or change assignments for the currently selected probes.
0
Reassigns the selected probes to this tenant. If set, only agents in this tenant can be assigned.
Agent Assignment
Current selection
Threshold Overrides
Add PRTG Server
PRTG Configuration Backup
Read-only structural snapshots captured on each scheduled sync. Nothing here is ever written back to PRTG.
Loading…
Duplicate Probe
Bulk Duplicate Probes
Selected probes will be duplicated into the target tenant with "Copy of " prefixed to each name.
Agents in selected tenant:
Start Security Scan
XDR / AV Settings
When enabled, agents will run periodic vulnerability and threat scans. Disabled by default.
Threat Detail
Probe Groups & Categories
Groups
Categories
Organize probes into a hierarchy of groups and sub-groups. Groups your own sub-tenants create are theirs; groups you create here are also available to any of your own sub-tenants. Select a group to see its full effective configuration.
Groups
Select a group on the left to see its configuration.
Global categories (Firewall, Switch, AP, ...) are always available. Categories you add here are yours only — never visible to other tenants — and are additionally available to any of your own sub-tenants.
Categories
New Network Scan
to
Scans are capped at 65536 hosts per run — a CIDR or range larger than that is silently truncated to the first 65536 addresses. A killed/restarted agent resumes an in-progress scan rather than starting over.
Either way, a scan finishing never installs anything by itself — this only controls how hosts get selected afterward.
Deploy Credentials
Stored encrypted at rest for the future push-install feature (WinRM/SMB) — that feature has not shipped yet, so these credentials aren't used for anything yet. Saving them here now means they're ready the moment it does.
| Label | Domain | Username | Added | Last used | |
|---|---|---|---|---|---|
| Select a tenant | |||||
Auto-scan on Agent Connect
When enabled, a ping-sweep network scan runs automatically the first time an agent's subnet is detected (and again if it changes) — no manual click needed. Off by default; this scans the agent's LAN, so only enable it where that's expected/authorized.
New Remote Session
If provided, the agent will attempt to apply this as the RustDesk permanent password for unattended access.
Alert Rule
Hold Ctrl/Cmd to select multiple channels
Alert Management Rule
Leave empty to match any alert type.
Leave empty to match any severity.
Notification Channel
Global channels are visible everywhere. Tenant channels are only usable by that tenant and its scoped resources.
Scheduled Report
Cron: min hour day month weekday (e.g. 0 8 * * 1 = Mon 8AM)
Health Threshold Template
Change Password
Reset Password
Choose New Password
User Activity —
Loading...
Set New Password
Generate Certificate
Let's Encrypt Certificate
Obtain a free TLS certificate from Let's Encrypt via ACME HTTP-01 challenge. Your domain must resolve to this server and port 80 must be reachable from the internet.
Add Nginx Domain
Add a domain to nginx management. A Let's Encrypt certificate will be automatically issued using the webroot method. The domain must resolve to this server's IP and port 80 must be reachable from the internet.
Domain Services —
Tag this domain with the services that depend on it. A service can be tagged on more than one domain (e.g. while running a cutover).
New Domain Cutover
Registers a guided, staged cutover. Nothing is pushed to any agent yet — this just creates the run and its target scope. Pick a small scope first if this is your first cutover.
Create User
Edit User
Dialog
Create Permission Group
Edit Permission Group
Tenant
Notification Preferences
Choose how you're notified per category and per priority tier. In-app notifications are always on. A medium your tenant has disabled won't appear here even if you turn it on. If you set both a category and a tier preference for the same medium on an alert that has a tier, the tier setting wins.
Push notifications
Real device notifications, even when this dashboard tab is closed. Enabled per device -- turn it on separately on your phone and your laptop if you want both.
Checking...
By Priority Tier (wins over category, below)
| Tier | Push | |
|---|---|---|
| Loading… | ||
By Category (default, unless a tier setting above overrides it)
| Category | Push | |
|---|---|---|
| Loading… | ||
Assign Agents to Tenant
New Agent Group
Quick Allocate Agent
Agent
—
—
Migrate / Re-Allocate Agent
Agent
—
—
—
All historical data for this agent will be moved to the new tenant.
Add WireGuard Peer
WireGuard Config
Review and edit the raw tenant WireGuard config (<interface>.conf) below. Changes are saved to the database — click Re-deploy to push to the agent.
Hourly Drill-Down
Visit Details
MTR Run Detail
Screenshot Viewer
0 / 0
No screenshot selected.
Agent Configuration Override
Overrides apply to agent: . Leave blank to inherit from tenant/global defaults.
Tracking
Intervals
Thresholds
Reporting Channels