We are creating a query to find the DAT update task triggered in EPO Task. By that time we could see initaior type and initaitor ID.
On demand, updatetask and automatic.
From the report i am getiing logs from all the type for endpoints. For example 100 machines in my environment, 50 showing as ondemand, 25 showing as updatetask and remaining 25 machines showing as automatic.
We need to know detail about these 3 initiator type. or how to know from which method our endpoints will get DAT update.
Also why all these 3 types via our endpoints are getting update.?
Give me some clarity about all these 3 points to achieve the non compliance endpoints in my environment.
Kindly update for my above query.