An endpoint map returns connections, applications, and raw processes that are associated with an IP address. You might create an endpoint map if you are planning to take an endpoint offline and you want to see precisely which applications could be impacted.
Remember that because IP addresses can be dynamic, you might need to frequently refresh your endpoint maps. Endpoint maps are meant to be a temporary visualization of your environment.
Before you begin, you must have the IP address that you want to target for the map. For the best results, these endpoints must have the Map tools installed. To get the Map tools installed on endpoints, the endpoints must be in the Map action group. See
By default, the endpoint database for Map, endpoint maps, and application maps contain 24 hours worth of data. To change these values, go to the Map Overview page, click Settings , then the Time Range tab. These values apply to all maps and endpoint databases for Map.
View an endpoint map
- From the Map Overview page, go to the Maps section and click the Endpoints tab. Type in the IP address that you want to map.
- The resulting map shows the IP address of the host and all processes that are running on that host. Arrows to and from the host show inbound and outbound connections to other processes, including the ports over which this communication is occurring.
- (Optional) To re-center the map, click Center .
To view application components that are running on the endpoint, click the Components tab. For each application component, this tab displays the process, command line, and port for the process that is running.
View mapped applications for endpoint
To view the application services that contain this endpoint, click the Active Applications tab. The list displays the applications, along with the component of that application that are running on the endpoint.
View connection details
To view the details of a connection, click the connectors between the processes or ports.
Last updated: 3/28/2023 4:12 PM | Feedback