Devices

This is the screen your technicians live in. From here you see the whole fleet, open any machine and do everything that does not require taking remote control.

The list

Side menu, Devices. It shows your organization's whole fleet, sorted alphabetically by name, 20 per page.

The status and last seen columns refresh on their own every 10 seconds. No need to reload to see a machine come back.

There are eight columns: Device (with the hostname below it), Customer, OS, Agent, RAM, Status, Last seen and Actions. You can reorder by clicking any column header.

Searching and filtering

The search box looks at three things: name, hostname and Kairos ID. Nothing else.

This matters because it is the most common source of confusion: searching for an IP, a customer name, an operating system or something written in the technical notes returns nothing. It is not broken: the search does not look at those fields.

There are two filters: by customer and by status. They are remembered between visits, so if you come back to the list and see fewer devices than expected, check whether a filter is still active. The Clear filters button appears when one is.

The four statuses in the filter:

That distinction between Offline and Offline without notice is the most useful thing in the list. The first is an orderly shutdown; the second is something to look into.

What each person sees

The list does not require a special permission: any user in your organization can open it. What does apply is per-device visibility.

A device a technician has no capability over does not appear at all. It is not greyed out or crossed through: it is not there. If someone on your team says machines are missing, check their access rules before hunting for a bug.

The row menu

A Connect button if the device is online and supports remote control (Windows and macOS; not on Linux), plus the three-dot menu with:

Revoke credential only appears on devices with an individual credential. Those using the customer's shared credential do not have one.

There are no bulk actions. The list has no selection checkboxes. Operations across many devices live in their own modules: updating agents from the customer record, mass reboot from Patching.

The device record

Fifteen tabs. On a Linux machine there are eleven, because four have no equivalent. On a Mac all fifteen are shown today.

The tab order is fixed. On mobile they collapse into a dropdown.

The tabs that do not exist on Linux are Startup, Registry, Printers and Certificates: there is no honest equivalent on that system. The other eleven do appear, Terminal included.

Terminal also requires a permission of its own. Opening a free shell against a customer's machine is not the same as looking at a list of services: without the open terminal permission the tab is not even offered, and the route rejects anyone who types the URL by hand. Today the terminal only works on Windows machines: on Linux and on macOS the tab is shown, but the agent does not answer on the other end yet.

On a Mac no tab is hidden. All fifteen are shown, without exception. Four of them (Startup, Registry, Printers and Certificates) belong to Windows and have nothing to show on macOS.

What does work on a Mac today is the AI Commands console, which sends bash, and remote control from the Connect button in the header.

The Summary

Four panels with all the machine's data:

• System: operating system, version, CPU, RAM, agent version
• Assignment: customer, site, department, device type
• Network: public IP, local IP, hostname, Kairos ID
• Remote desktop credential: status and a button to rotate it

Plus the remote session history and the technical notes.

This panel works with the machine powered off, because it comes from the database.

Where each value comes from, and when it updates

One thing worth knowing: the operating system, CPU, RAM and IPs are written once, when the agent enrolls, and are not refreshed afterwards.

If you add memory to a server or change its static IP, the panel will keep showing the old values until you edit them by hand.

What does get scanned periodically is the OS and software inventory: new devices every 30 minutes until the first reading, and the whole fleet on Sunday nights. That detail appears under Reports, not on the device record.

Actions on a device

There are several and they do different things. Worth getting clear on, because two look alike and one is irreversible.

Edit

Lets you change customer, name, hostname, Kairos ID, status, operating system, version, CPU, RAM, IPs and technical notes.

To move a device to another customer, this is the path: change the customer dropdown. Only active customers are listed.

Restart agent

It lives in the AI Commands console, not in the row menu.

It flags the device and the agent restarts on its next heartbeat, up to 60 seconds later. It is harmless: it drops off for a few seconds and comes back on its own.

Uninstall agent

The agent uninstalls itself on its next contact and the device disappears from the list. This is the clean way to remove a machine.

Until the agent confirms, the device stays in the list. If it never confirms, it is removed for good the next day.

Remove from list

This is the irreversible one. It physically deletes the panel row and everything hanging off it: command history, alerts, sessions, all of it.

Use it only when the machine no longer exists. If the agent is still installed somewhere, you will have to uninstall it there.

Delete device

It sits at the bottom of the Edit screen, not in the row menu.

Its confirmation message says it cannot be undone, but the deletion is logical: the row is preserved. The genuinely irreversible action is Remove from list, which has the gentler message.

It is the opposite of what the messages say. Keep that in mind until it is corrected.

Revoke credential

Cuts the agent's access immediately. Use it when a machine changed identity (restored image, new motherboard) and you need to force a clean enrollment.

It cannot be undone from the panel. After revoking, the agent has to re-enroll.

If the device has no individual credential, the panel tells you and does nothing.

Rotate credential

Requests a new remote desktop password. It does not ask for confirmation and it drops the active remote session if there is one.

The device stays connectable with the old password until the agent reports the new one.

The live tools

Services, Processes, Applications, Startup, Tasks, Registry, Explorer and Printers all work the same way: opening the tab sends a command to the device and waits for the answer.

The maximum wait is 100 seconds. If the device does not answer, you get: "The device did not respond in time. It may be offline or taking longer than usual."

That message does not distinguish a powered-off machine from a slow one. There is no warning beforehand if the device is offline: you go in, wait a hundred seconds and get the error. Check the status in the header before opening a tool.

Services

Name, status, startup type and account. Actions: Start, Stop and Restart. The last two confirm.

It works the same on Windows and Linux, over Windows services or systemd units as appropriate.

Processes

Sorted by memory descending. Single action: End task, with confirmation.

On Windows the CPU column shows accumulated seconds; on Linux it shows a percentage. That is a real difference in what each system reports.

Applications

Installed software, with publisher, version and size. Action: Uninstall, with confirmation.

On Linux there is no uninstall button. Removing a package drags dependencies along and is not the same operation as running an uninstaller. There is no installation date either, because package managers do not record one.

Tasks

Windows scheduled tasks, or cron and timers on Linux. Actions: Run, Enable and Disable.

On Linux the tab is read-only. A cron line cannot be enabled on its own: you would have to edit the crontab.

Explorer

Folder navigation with breadcrumbs, double click to enter, multiple selection with Ctrl and Shift.

The Actions menu has: select all, none, invert, cut, copy, paste, rename, delete, download and upload. Plus New folder and a search box that filters what is already loaded, without searching the device.

Two things worth knowing before using it:

• Only Delete asks for confirmation. Paste does not confirm, not even when it came from Cut and therefore moves files.
• The transfer limit is 100 MB per file, in both directions.

Downloading and uploading files does not work on Linux devices. Both buttons appear anyway: they get pressed and they fail. Navigating, creating folders, renaming, deleting, copying and moving do work on Linux.

Registry and Startup

Both are read-only. In Registry you browse keys and see values, but cannot create or edit them. In Startup you see the startup programs, but cannot disable them from the panel.

Grouping and organizing

Site, department and device type are set once, when the installer is built, and travel inside the MSI.

Two things worth knowing:

• They cannot be edited from the record. To change them you have to build a new installer with the right labels and re-enroll the device.
• They do not filter anything. Today they are descriptive labels, not search criteria.

The same goes for technical notes: a free field visible on the Summary, but not searched or filtered on.

What does group for real are the monitoring groups and the patching groups, managed from their own modules, and the customer, which is the only grouping the list filters by.

With the device offline

In the header the status is always clear: the status badge, "Seen: X ago", and the Connect button greyed out with the reason.

What it does not do today

• The search does not look at IP, customer, operating system or notes.
• There are no bulk actions in the list.
• Site, department and type cannot be edited after enrollment, and do not filter.
• IPs and hardware data are not refreshed automatically.
• Registry and Startup are read-only.
• On Linux: Tasks is read-only, Applications cannot uninstall, and file transfer does not work.
• On macOS: Connect and AI Commands work today, nothing else. The eight live tools, the Terminal, Monitoring, Patches, Certificates and the inventory do not respond on a Mac yet.

Frequently asked questions

I search for the device's IP and nothing comes up. The search only looks at name, hostname and Kairos ID. Search by name or filter by customer.

A technician says they cannot see all the devices. A device they have no capability over does not appear in their list. Check their access rules.

What is the difference between Delete device and Remove from list? Remove from list is the irreversible one: it deletes the row and all its history. Delete device preserves the row despite what the message says.

I opened Services and it just kept loading. The maximum wait is 100 seconds. If the device is offline it will end in an error: check the status in the header first.

I added RAM to the server and the panel shows the old amount. Those values are written at enrollment and never refreshed. Edit the device by hand.

I want to change a device's site or department. Today you cannot from the record. You have to build a new installer with the right labels and re-enroll.

Can I download a file from a Linux server? No. File transfer works on Windows only, even though the button appears.

I cut some files and hit Paste by accident. Paste does not ask for confirmation and moves straight away. There is no undo.

I need to filter by site or department. Not possible today. Use monitoring or patching groups, which do group for real.

Can I edit the Windows registry from the panel? No. Browsing is read-only.