Monitor your Incydr environment health

Overview

A healthy environment is one that actively collects file activity from active endpoints and data connections and reports it in the Incydr console for review and investigation in Forensic Search, on dashboards, and in Alerts. If devices and data connections aren't reporting events as expected, you may be blind to activity that's putting your valuable business data at risk.

In addition, an unmanaged environment can include any number of users who are no longer with the organization or devices that are no longer in use. These unneeded users and unused devices pose risks to your organization's security strategy:

• Unnecessary data may violate your organization's data retention policies.
• They delay investigations by making it difficult to understand which questions need to be answered.
• It's difficult to diagnose which users or devices are involved in risky activity, resulting in unfocused investigations and unclear outcomes.
• They cause processing delays and inefficiencies.

This page lists resources for monitoring the health and status of your environment.

Environment health

Review the links below for more details about monitoring different components of your environment health.

Insider risk agent

Security monitoring

• Monitor and improve Incydr environment health
• Risk Exposure dashboard reference
• Incydr API
• Incydr command-line interface (CLI)
• Install and manage the Insider Threat app for Splunk

Cloud data sources

• Data Connections reference

Subscriptions

• License Plan reference

Backup agent

Backup

• View organization usage statistics
• View user storage
• Device status report use cases

Subscriptions

• License Plan reference
• Cold storage license usage

System status

To see the current status of the Incydr cloud and our support services, including ticket, chat, and phone systems, visit our status page.

Additional resources

There are a number of additional resources available to help you get the most value from your environment while securing your organization's vital data.

• Use the tools in our customer toolkit to get up and running quickly and discover how to optimize Incydr to elevate your security and insider risk programs.
• Consult with our Professional Services team for help with deploying Incydr across your organization and integrating with tools you already use.
• Engage one of our Technical Account Managers (TAMs) to gain extensive insights about the health of your environment and fully leverage all Incydr features, customized for your organization. (TAM services may already be included in your support plan.)

Contact your Customer Success Manager (CSM) for more information about how to access these resources. If you do not know your CSM, please contact our Technical Support Engineers.