Where can you find hosts that are in Reduced Functionality Mode?
According to theCrowdStrike Falcon Devices Add-on for Splunk Installation and Configuration Guide v3.1.5+, Reduced Functionality Mode (RFM) is a state where a host's sensor has limited functionality due to various reasons, such as license expiration, network issues, tampering attempts, etc1.You can find hosts that are in RFM by using the Host Search tool and filtering by Sensor Status = RFM1.You can also view details about why a host is in RFM by clicking on its hostname1.
Queen
2 days agoSimona
7 days agoMarvel
12 days agoStephanie
2 months agoRosendo
2 months agoIndia
2 months agoAzzie
2 months agoBea
3 months agoEmilio
3 months agoJacklyn
3 months agoMauricio
3 months agoPhuong
3 months agoLauryn
3 months agoJulieta
4 months agoDelisa
4 months agoDannie
5 months agoDaron
5 months agoRima
5 months agoRonny
5 months agoJulieta
5 months agoCheryl
5 months agoAilene
6 months ago