Emtelle Analytics

Endpoint Management Platform

Username

Password

Authenticator Code

Tenant: Agent:

Updated: -

Dashboard

Users / Agents

All

Online

Offline

Warning

Error

Security

Unallocated

Hostname	IP Address	Platform	Status	Health	Issue	CPU	Memory	Last Seen

ISP / Edge

Dedicated ISP fleet rail. MikroTik health, tunnel visibility, and the new FortiGate MSP Firewalls inventory now sit beside the users/agents view instead of being buried below the dashboard.

Probes & Network Map

All Probes

Healthy

Warning

Error

Uncategorised

Name	Category	Type	Target	Status	Health	Interval	Actions

Copilot Chat

Past chats

Loading model catalog...

Select or create a chat

Audited AI workspace for controlled system upgrade requests.

Create a chat to start a controlled AI-assisted task.

Admin accepts high-risk bypass and recovery point creation

Control & audit

High-risk destructive requests are blocked by default. Admin bypass creates a recovery point first and records the iteration.

Messages

High risk

Blocked

Recovery points

No recovery points yet.

Iterations

No iterations yet.

Agents

Unknown Agent Staging

Unallocated Agents 0

Agents not yet assigned to any tenant

Hostname	IP	Platform	Version	Status	Last Seen	Actions

All Agents

Hostname	IP	Platform	Version	Health	VPN	Status	Details	Last Seen	Actions

Agent View

—

— — v— Unallocated

Overview

Metrics

Productivity

Software

Browser

Sessions

Events

Probes

Processes

Automation

Patches

Security

Interfaces

Overview

Networking

CPU Usage

Memory Usage

Disk Usage

Network I/O

Metrics Trend

Speedtest

No recent speedtest results

Select an agent...

Resource Hog Processes

Process	Avg CPU %	Max CPU %	Avg Memory	Max Memory	Samples	Category

System Overview

Select an agent...

Alerts & Warnings

No alerts

Connection History

No connection events

Network Diagnostics

Select an agent...

Active Path Summary

Select an agent...

Network Interfaces

Select an agent...

Public IP & Network Identity

Select an agent...

Public IP History

Select an agent...

Work Time Breakdown

Application Usage

No data

Website Usage

No data

Foreground & Background Apps (Live)

No process data

Category Breakdown

App Usage

Hourly Activity (click an hour for details)

Top Domains

Screenshots

Productivity Trend

Software Action Log

No action logs yet.

Name	Version	Publisher	Install Date	Size	Type	Actions

Visits

Top Domains

Performance

Errors

Request Traces

Interactions

Slow Requests

Time	URL	Title	Domain	Duration	Browser

URL	Load	DCL	LCP	FCP	TTFB	CLS	Reqs	Errs	Tasks	Score

Time	Level	Type	Source	URL	Message

Slow requests only (>1s)Showing individual network requests captured per page visit. Data from raw_data (all extension versions) + dedicated trace table (extension 2.1+).

Time	Type	Method	Domain	URL	Status	Duration	Size	Error

Last Seen	Domain	Element	Interaction	Hits	Avg Complete	Requests	Data Size	Detail

Slowest Domains

Domain	Avg Duration	Max Duration	Slow Count	Total Requests

Slowest Endpoints

URL	Avg Duration	Max Duration	Slow Count

Authentication Events

WebSocket Sessions

Active Sessions

These are currently open user logon sessions reported by the agent (interactive, remote, service). Entries update as agents report login/logoff state.

No active sessions

Sessions per Day

User Summary

Session Details

Login	Logout	Type	Duration	IP	Status

Top Source IPs

No authentication telemetry yet.

Users Under Pressure

No authentication telemetry yet.

Recent Authentication Events

Tracks successful logins, failed attempts, explicit credential use, logoff activity, and source IP telemetry reported by each agent.

Suspicious only

Time	User	Result	Type	Method	Source IP	Risk	Reason

Agent WebSocket Sessions

Agent	Connected	Disconnected	Duration	IP	Messages ↑↓	Data ↑↓	Version	Status

Time	Level	Type	Source	Event ID	Message	Actions

Agent Runtime & Reporting Overhead

Runtime usage details will appear here.

Process Analytics

ML Optimization Insights (This agent)

Model recommendations will appear here.

Agent	Score	Risk	Recommendation	Top Reason	Primary Action

Top CPU Consumers

Process	Avg CPU	Max CPU	Samples

Top Memory Consumers

Process	Avg Memory %	Max Memory %	Samples

Long-running / Persistent Processes

Process	Samples	Avg CPU	Max CPU	Avg Memory %	First Seen	Last Seen

	PID	Name	User	CPU %	Memory %	Status	Actions

Standard Optimization Tasks

Clear temporary files Disk cleanup (safe) Defragment HDD / optimize drives TRIM SSD optimization Flush DNS cache Clear prefetch cache

Custom Optimization Script

Script Name

Description (optional)

PowerShell Script (runs on target endpoint)

Saved Optimization Scripts

Name	Description	Updated	Actions

Automation Scheduling

Automation Activity Log

No automation logs yet.

Show acknowledged

Patch Gaps

Software	Installed	Min Safe Version	Category	Severity	EOL / CVEs	Notes / Remediation	Actions
Loading...

XDR Override:

XDR Threats

XDR is not enabled for this tenant.

Severity	Type	Description	Process/Connection	Score	Detected	Actions
Loading...

Security Scan History

Date	Type	Findings	Open Ports	Vulnerabilities	Score
Loading...

Findings by Severity

Remediation Steps

Wi-Fi Signal (RSSI / Quality)

Throughput — RX (solid) / TX (dashed)

Gateway Latency (ms)

Packet Loss & Errors

VPN Session History

Interface	Type	Endpoint	Connected	Disconnected	Duration	RX	TX	Avg Latency	Status

Interface Activity Log

Started	Interface	Network / SSID	Duration	RX ↓	TX ↑	Avg RSSI	Latency	Loss%	Change / Reason
Loading activity log...

Agent Health

Version Distribution

Platform Distribution

Hostname	Status	Version	Platform	Last Heartbeat	Connection Health	Uptime	Events (24h)

Recent Connection Events

System Metrics

Overview

Networking

CPU Usage

Memory Usage

Disk Usage

Network I/O

Metrics Trend

Speedtest

No recent speedtest results

Select an agent...

Resource Hog Processes

Process	Avg CPU %	Max CPU %	Avg Memory	Max Memory	Samples	Category

System Overview

Select an agent...

Alerts & Warnings

No alerts

Connection History

No connection events

Network Diagnostics

Select an agent...

Active Path Summary

Select an agent...

Network Interfaces

Select an agent...

Public IP & Network Identity

Select an agent...

Public IP History

Select an agent...

WireGuard Monitoring

Live interface health, peer handshakes, traffic flow, and self-heal recovery activity for managed WireGuard tunnels.

Aggregate Tunnel Traffic

Loading live WireGuard data…

Recovery Loop

Loading self-heal status…

Managed Interfaces

Loading interface inventory…

Recent Recovery Events

Loading recovery events…

Interface Status Matrix

Loading interface matrix…

Processes

Agent Runtime & Reporting Overhead

Runtime usage details will appear here.

Process Analytics

ML Optimization Insights (All tenants / agents)

Model recommendations will appear here.

Agent	Score	Risk	Recommendation	Top Reason	Primary Action

Top CPU Consumers

Process	Avg CPU	Max CPU	Samples

Top Memory Consumers

Process	Avg Memory %	Max Memory %	Samples

Long-running / Persistent Processes

Process	Samples	Avg CPU	Max CPU	Avg Memory %	First Seen	Last Seen

	PID	Name	User	CPU %	Memory %	Status	Actions

Installed Software

Software Action Log

No action logs yet.

Name	Version	Publisher	Install Date	Size	Type	Actions

Software Store & Deployment Templates

Store Packages

Package Name

Version

Source Type

Package ID

Manager

Installer Type

Download URL

ZIP Upload

Install Args

Install Command (optional; supports {download_file}, {zip_dir})

Description

Name	Source	Version	Installer	Tenant	Actions

Deployment Templates

Template Name

Description

Template Packages

Assign tenants (for auto-apply)

Auto-apply to newly connected agents

Name	Packages	Auto	Actions

Deployment Activity

Time	Package/Template	Target	Status	Message

Automation & Machine Optimization

Standard Optimization Tasks

Clear temporary files Disk cleanup (safe) Defragment HDD / optimize drives TRIM SSD optimization Flush DNS cache Clear prefetch cache

Custom Optimization Script

Script Name

Description (optional)

PowerShell Script (runs on target endpoint)

Saved Optimization Scripts

Name	Description	Updated	Actions

Automation Scheduling

Automation Activity Log

No automation logs yet.

System Events

Time	Level	Type	Source	Event ID	Message	Actions

Productivity

Work Time Breakdown

Application Usage

No data

Website Usage

No data

Foreground & Background Apps (Live)

No process data

Category Breakdown

App Usage

Hourly Activity (click an hour for details)

Top Domains

Screenshots

Productivity Trend

Reports

Agent Report

Tenant Report

Global Report

Probe Performance

Vendor Intelligence

WLAN Performance

Daily Activity

Hourly Breakdown

Top Applications

Top Domains

Application Sessions (Start/Stop Detail)

Connection Summary

Data Consumed

Select Tenant

Daily Breakdown

Top Users

Top Applications

Top Domains

Daily Activity (All Agents)

Top Applications

Top Domains

Single Probe

Selected Probes

Tenant

Global

Probe

Probes

Tenant

Avg Primary / Secondary

Status Mix

Coverage / Staleness

Downtime / Event Pressure

Reporting Highlights

Probe Breakdown

Downtime Periods

Recent Probe Events

Tenant

Ruckus Analytics

PRTG

Read-only correlation between Ruckus Analytics and PRTG. The association model learns from repeated matches over time and only reads current inventory, dependencies, topology, and recent change data.

Matched Infrastructure

Dependency Highlights

Port / Config Exceptions

Recent Topology Changes

Unmatched Ruckus Assets

Unmatched PRTG Devices

Ruckus Controller

Domain (optional)

WLAN / SSID

Zone (optional)

Time Window

RSSI Distribution

RSSI & Packet Loss Trend

Access Point Performance

Issue Summary & Event Counts

Client Sessions

Connection Events

Controller Alerts

Live AP Events

Client Sessions

Client	MAC	IP	AP	Zone	Status	Avg RSSI	Avg SNR	Packet Loss	Retry Rate	Duration	Issues	Started	Last Seen

Connection Events

Time	Event	Severity	Client	MAC	AP	Zone	RSSI	Packet Loss	Retry Rate	Previous AP

Controller Alerts

Time	Type	Severity	Entity	Client MAC	Zone	Message

Live AP Events (syslog feed)

Auto-refresh 30s

Time	Event	Client MAC	RSSI	AP	Zone	SSID
Load the report then select a WLAN to see live AP events.

Select a controller and WLAN to generate the performance report.

Activity Timeline

Select an agent and date

Browser Activity

Visits

Top Domains

Performance

Errors

Request Traces

Interactions

Slow Requests

Time	URL	Title	Domain	Duration	Browser

URL	Load Time	LCP	FCP	CLS	TTFB	Score

Time	Level	Type	Source	URL	Message

Show slow requests only

Time	Method	URL	Status	Duration	Size	Slow?	Error

Last Seen	Domain	Element	Interaction	Hits	Avg Complete	Requests	Data Size	Detail

Slowest Domains

Domain	Avg Duration	Max Duration	Slow Count	Total Requests

Slowest Endpoints

URL	Avg Duration	Max Duration	Slow Count

Sessions

Authentication Events

WebSocket Sessions

Active Sessions

These are currently open user logon sessions reported by the agent (interactive, remote, service). Entries update as agents report login/logoff state.

No active sessions

Sessions per Day

User Summary

Session Details

Login	Logout	Type	Duration	IP	Status

Top Source IPs

No authentication telemetry yet.

Users Under Pressure

No authentication telemetry yet.

Recent Authentication Events

Tracks successful logins, failed attempts, explicit credential use, logoff activity, and source IP telemetry reported by each agent.

Suspicious only

Time	User	Result	Type	Method	Source IP	Risk	Reason

Agent WebSocket Sessions

Agent	Connected	Disconnected	Duration	IP	Messages ↑↓	Data ↑↓	Version	Status

Traffic & Filtering

Rules

Filters

Policies

Filter Policies

Policies are evaluated top-down by priority. Default action is applied if no rule matches. Rules within a policy are evaluated in order (drag to reorder).

URL Category Groups

Manage groups of URLs/domains. Assign category groups to filter policy rules for bulk blocking/allowing.

Time	Domain	URL	Action	Blocked	Rule

Network Probes

0 selected

Critical Infrastructure

	Name	Category	Type	Target	Health	Coverage	Interval	Last Check	Enabled	Actions

Probe Analytics

Check-in Summary

No data yet.

Poor Performance

No poor-performing agents in this period.

Sensors & Linked SNMP Context

No sensors yet.

Agent Performance

Agent	Status	Latency	Loss %	Last Check	Next Check

Latency

Packet Loss / Errors

Status Trend (Healthy / Warning / Error)

Type-Specific Detail

Select a probe to view detailed analytics.

Cross-Agent MTR Comparison

Probe Details

Network Scans

Total Scans

Completed

Hosts Discovered

Services Found

Probes Created

Scan History

Analytics

Discovery

Date	Agent	Target	Type	Status	Hosts	Findings	Map	Probes	Actions

Scan Trend

Severity Distribution

Top Discovered Hosts

Host	Findings	Critical/High	Actions

Select a completed scan to view discovered hosts and create probes from the results.

Scan Findings

Severity	Host	Port	Service	Description	Recommendation

ISP

New ISP visibility

Tunnel drill-down

Each MikroTik now exposes live tunnel, connected-node, latency, endpoint identity, and tx/rx monitoring from the Details and Config pages.

Safer lifecycle control

Save & Apply All is live, and Remove Control now defaults to cleaning router-side artifacts before deleting the managed record.

MSP Firewalls

FortiGate management is now available under the dedicated MSP Firewalls dashboard for inventory, live status, config control, and backups.

MikroTik Connection Methods

Direct API

Use RouterOS API / API-SSL when the server can reach the router directly. Best for static/public IP edges.

Agent Proxy

Use a LAN agent to proxy management behind NAT. The router host/IP should be reachable from that agent.

RouterOS Installer

Install the RouterOS scheduler script for telemetry. Add management credentials during generation if you also want backup, diff, restore, and config push from the UI.

Total Devices

Online

Offline

Installer Managed

14-Day Uptime History

Daily uptime percentages plus hourly blocks built from 5-minute MikroTik polling. Click any hour to inspect the exact outage intervals inside that hour.

Loading uptime history...

Name	Connectivity	Status	RouterOS	LAN / WAN	Model	Last Seen	Last Backup	Last Log Sync	Actions

Live Connectivity Topology

Secure hub, sites, and MikroTik nodes with WireGuard and applied topology links.

Loading topology…

Branches

Name	Description	Actions

Sites

Name	Branch	Domain	Location	Actions

Auto Route & VPN Planner

Select branches, sites, or specific MikroTik devices. The planner only applies safe add-only changes: new static routes, new WireGuard peers/interfaces, and fresh backups before/after every topology change.

Plan Name

Branches

Sites

Devices

Pair	Strategy	Left Routes	Right Routes	Endpoints	Findings	Action

Device	Type	Hash	Created	Actions

Device	From	To	Changes	Created	Actions

Device	Time	Severity	Topics	Message

Device	Action	Details	Performed By	Time

MikroTik Details

Select a MikroTik device from the ISP page.

Performance Timeline

Tunnel & Topology Monitoring

No MikroTik device selected.

Recent Logs

Time	Severity	Topics	Message

Recent Backups

Type	Hash	Created	Actions

Audit Trail

Action	Details	Performed By	Time

Router Overview

No MikroTik device selected.

Network & Routing

No MikroTik device selected.

Router Probes

No MikroTik device selected.

Alerts

No alerts.

MikroTik Cloud & Network Config

Select a MikroTik device from the ISP page.

Cloud Management

Branch

Site

Preferred / WireGuard Endpoint

Relay Agent

Management Host/IP

Port

Mode

API Username

API Password

Use API-SSL Use RouterOS agent queue Prefer preferred/WireGuard endpoint

Monitoring & Backup Policy

Telemetry Interval (min)

Offline Grace (min)

Backup Every (min)

Backup Retention (days)

Next Scheduled Backup

Enable automatic backups

Router Settings

Identity

Timezone

System Note

DNS Servers

Winbox Port

API Port

API-SSL Port

Allow remote DNS requests Enable Winbox Enable API Enable API-SSL

Backup before apply Backup after apply

Live Tunnel Monitoring

No MikroTik device selected.

Network Configuration

Inventory will appear after loading the latest backup snapshot.

No configuration inventory loaded.

Monitoring Snapshot

No MikroTik device selected.

Routing & Tunnel Summary

No MikroTik device selected.

Recent Config Changes

No configuration changes loaded.

Recent Alerts

No alerts.

MSP Firewalls

FortiGate inventory and control entrypoint. Open a firewall to load the full dedicated details view for HA, WAN, hardware, VPN, backups, and audit.

Total Firewalls

Online

Error

Pending

Backups

14-Day Uptime History

Daily uptime percentages plus hourly blocks built from 5-minute FortiGate polling. Amber marks partial hours where telemetry degraded or recovered within the hour.

Loading uptime history...

FortiGate Inventory

Use FortiGate REST API auth with a token and optional PKI client certificate for the cleanest management path. Legacy username/password mode is also supported.

Name	Connectivity	Scope	Status	Firmware	Last Seen	Last Backup	Actions

Details Workflow

Click the details button on a firewall to open its dedicated operational view. That page loads the full FortiGate API-backed detail set for HA state, WAN links and IPs, interfaces, FortiSwitches, switch ports, FortiAPs, AP clients, VPN users, site tunnels, backups, diffs, and audit history.

FortiGate Details

Select a FortiGate device from MSP Firewalls.

Select a FortiGate device from MSP Firewalls to load full live status, interfaces, routes, backups, and audit history.

HA & WAN Overview

Select a FortiGate device to inspect HA, WAN links, and SD-WAN health.

Managed Hardware Inventory

FortiSwitch and FortiAP inventory will appear here once a device is selected.

Performance & Control Plane

CPU, memory, sessions, admin access, and routing neighbor telemetry will appear here.

Service & Fabric Inventory

DHCP, ARP, policy, SSID, and switch VLAN inventory will appear here.

VPN Users

User	Group	Status	2FA	Actions

Site-to-Site Tunnels

Tunnel	Peer	Status	Networks	Actions

Recent Backups

Type	Hash	Created	Actions

Recent Config Diffs

Compared	Summary	Created	Actions

Recent Audit

Action	Details	Performed By	Time

Add FortiGate

Name

VDOM

Host / IP

Port

Tenant

Branch

Site

Authentication

API Token

API Username

API Profile Name

API Role

Client Certificate (PEM)

Private Key (PEM)

Optional CA Bundle (PEM)

Optional: upload a PEM client certificate and private key if this FortiGate REST API profile requires mTLS.

Username

Password

Notes

Verify TLS certificate

Apply FortiGate System Settings

Hostname

Alias

Timezone

Admin HTTPS Port

Primary DNS

Secondary DNS

Capture backup before apply

Add VPN User

Username

Status

Password

User Group

Two Factor

Comments

Add Site-to-Site Tunnel

Tunnel Name

Interface

Managed Peer FortiGate (optional)

Peer Tunnel Name

Peer Gateway / Public IP

Pre-Shared Key

Local Subnet

Remote Subnet

IKE Version

Proposal

DH Group

Enable PFS Enable NAT traversal

Comments

Add MikroTik Device

Use this for directly managed or agent-proxied routers. For RouterOS-native telemetry deployment, use Generate Installer.

Name

Host/IP

Port

Username

Password

Tenant

Branch (optional)

Site (optional)

Proxy Agent (optional)

Winbox Port

Preferred Endpoint (optional)

Use SSL (API-SSL port 8729)

SNMP Monitoring

Total Devices

Online

Offline

Traps (24h)

Active Alerts

Poll Errors

Name	Host	Tenant	Port	Version	Vendor	Status	Attention	Last Activity	Actions

Latest Poll

Metrics Seen

Numeric Metrics

Changed Since Previous Poll

Metric	Latest	Previous	Change	Updated

Time	Incident	Source	Severity	Context	Actions

Data Points

OIDs Tracked

Time Range

First Poll

Latest Poll

Metric	Current	Range	Average	Signal	Samples

Alert Rules

Device	OID	Condition	Threshold	Severity	Cooldown	Enabled	Actions

Recent Alerts

Time	Incident	Device	Value	Severity	Status	Actions

Upload vendor MIB files to enable human-friendly OID labels in traps and poll results. Built-in definitions for standard MIBs and Fortinet/MikroTik are always available.

OIDs in Dictionary

—

MIB Name	Description / Module	Scope	OIDs	Loaded	Actions
Loading...

Upload MIB File

MIB File (.mib, .txt, .my)

Display Name (optional, defaults to filename)

Version (optional)

Scope

Tenant

Supported format: standard ASN.1 MIB syntax. The system extracts OBJECT-TYPE, NOTIFICATION-TYPE, and OBJECT IDENTIFIER definitions automatically.

Add SNMP Device

Name

Host

Port

SNMP Version

Community String

Auth Username

Auth Password

Auth Protocol

Priv Password

Priv Protocol

Vendor

Poll Interval (sec)

Tenant

New devices automatically inherit the generic starter profiles plus the selected vendor starter set.

OID Profiles

Starter sets include researched defaults for MikroTik, Fortinet, Ruckus, Aruba, and Netgear, and you can add your own custom OIDs on top.

Description

Starter Template

OIDs

OID	Name	Mode	Description / Unit	Actions

Advanced JSON

Use this only if you want to paste raw JSON. Saving will validate and normalize it.

Name	Vendor	Description	OIDs	Default	Actions

Anomaly Events

Critical Anomalies

Warning Anomalies

Metrics Tracked

—

Last Baseline

—

Recent Anomalies

Metric	Agent / Source	Severity	Observed	Baseline Mean	Std Dev	σ Score	Detected
Loading...

Patch Gaps

Agents Scanned

Critical Gaps

Warning Gaps

Avg Patch Score

—

Fleet Patch Summary

Agent	Patch Score	Critical	Warning	Info	Top Gaps
Loading...

Gaps —

Product	Installed	Safe Version	Severity	EOL Date	Note

Syslog

Sources

Events (window)

High Severity (0–3)

Unique Hosts

Syslog Sources

Source IP	Hostname	Format	Events (24h)	Last Seen
No sources detected

Recent Events

Time	Source	Sev	Facility	Hostname	App	Message
Loading...

NetFlow & sFlow

Devices Reporting

Total Flows

Total Bytes

—

Total Packets

Top Talkers

Source IP	Dest IP	Port	Proto	Bytes	Packets	Flows
Loading...

Device Stats

Device IP	Protocol	Flows	Bytes
Loading...

Recent Flow Records

Latest 100

Time	Device	Proto	Src IP	→ Dst IP	Port	IP Proto	Bytes	Packets
Loading...

Network Security

Security Centre (Phase 1)

Enable supplemental controls for endpoint security posture tracking (policy + telemetry surfaces).

Supplemental antivirus telemetry

XDR telemetry enrichment

MDR escalation workflow

Agent tamper protection alerts

Endpoint Trust & AV Hardening

Hardening Mode

Installer Integrity

Require publisher/path allowlisting guidance

Restrict runtime to trusted install paths

Block unsigned or unknown-publisher binaries

Alert on antivirus/quarantine blocking events

AV hardening profile not configured.

No Security Centre modules enabled.

Posture Summary

Findings Trend

Scan History

Date	Agent	Target	Type	Status	Findings	Actions

Scan Findings

Severity	Type	Host	Port	Service	Description	Recommendation

XDR / AV Threat Detection

Enabled

XDR / AV detection is disabled for this tenant. Enable it in Settings to start real-time threat monitoring.

Severity	Type	Description	Agent	Process/IP	Score	Status	Detected	Actions

No threats detected in the selected time window.

XDR Analytics

Remote Access

Remote modes: direct-connect and relay (control plane). Use relay when operator routing to endpoint network is blocked by NAT/firewall. Relay mode requires inbound TCP reachability to the relay port shown for the session (default range 47000-47999).

Remote Sessions

Agent	Type	Target	Status	Started	Duration	Data	Actions

Alerts

Active

Archived

Type

Severity

Acknowledged

From

Archived Source

Rows

Active Alerts

	Time	Severity	Agent	Type	Message	Status	Actions

Page 1

Alert Management Rules

Name	Action	Types	Similar	Scope	Status	Actions

Deployment

Deploy Script

Server URL

WebSocket URL

Secondary Server URL (optional)

Secondary WebSocket URL (optional)

Tags (comma-separated)

Department / Group

Windows

Linux

macOS

Info

The script will download and install the AppStats agent, configure it to connect to this server, and install it as a system service.

Downloads agent package from this server
Installs Node.js if not present
Configures connection to server
Installs as a system service
Sets up tags & department

Windows Installer (EXE)

Download the standalone Windows installer. It is now preconfigured with the current server URL and shared agent token when available, so admins can click through without retyping connection details.

Agent Upgrades

Upgrade Filters

Status

Agent

Version

Packages

Version	Platform	Size	Published

Trigger Upgrade

Agent

Version

Schedule For (optional)

Scheduled Upgrades Queue

Agent	Target Version	Scheduled	Status	Last Update	Error Log	Actions

History

Agent	From	To	Status	Triggered	Completed	Error Log

Extension Versions

Agent	Browser	Version	Last Reported	Status

Extensions & Downloads

Browser Extension

Monitor browsing activity, page performance, Core Web Vitals, and JS errors.

To install: Open your browser extensions page (Edge/Chrome/Brave/Opera/Firefox), enable Developer Mode, then drag-and-drop the .zip or load unpacked.

Windows Agent Latest

Endpoint monitoring agent for Windows with system metrics, processes, events, WireGuard VPN support and more.

Download Latest Agent

Linux Agent Latest

Endpoint monitoring agent for Linux servers and workstations.

Download Latest Agent

Browser Extension Setup

Download the browser extension zip file above
Extract the zip to a folder
Open your browser's extension page (edge://extensions, chrome://extensions, brave://extensions, opera://extensions, or about:debugging for Firefox)
Enable Developer mode (toggle in top-right)
Click Load unpacked and select the extracted folder
The extension will auto-read server URL and agent ID from the local AppStats Agent when available
If auto-config is unavailable, configure server URL manually:
The extension will begin sending browsing data to this server

Push Install via Agent (WebSocket)

Send the browser extension to connected agents for automatic install or update. The agent downloads the latest package, reapplies browser policy, and refreshes extension config defaults.

Bulk Push Install

Browser Extension Coverage

Track which agents have supported browsers installed, which browser extensions are reporting, and where browsing telemetry has gone stale or missing.

Agent	Browser	Installed	Extension	Last Live Data	Last Local History	Last Install	Status

Extension Install Results

Live endpoint install outcomes, including skipped browser reasons and policy/configuration errors.

Time	Agent	Browser	Status	Message	Error

TLS Certificates & Domains

Nginx Managed Domains

Add domains to automatically issue Let's Encrypt certificates and configure nginx for agent/dashboard access over any domain.

Domain	Type	Certificate Path	Cert Expiry	Status	Actions

Internal TLS Certificates

Certificates used by the Node.js HTTPS server. For production deployments behind nginx, the domain management above is preferred.

Domain	Issuer	Valid From	Valid To	Status	Actions

Tenants

All Tenants

Tenant

Overview

Hierarchy

Location

WireGuard VPN

Productivity

Agents

Tenant Name

Contact Email

Description

Max Agents (0 = unlimited)

Parent Tenant

Inherit parent configuration

Use the parent tenant's live productivity, reporting, and working-hours settings. Disable this to manage this sub-tenant independently.

Licensed Features

These tenant entitlements control which features are allowed to capture data, deploy tools, or operate for this customer.

Productivity Monitoring

Active window, idle time, input activity, and productivity timelines.

Browser Monitoring

Browser visits, page performance, and browser-extension deployment.

Screenshots

Periodic screenshot capture and screenshot gallery access.

Process Monitoring

Process snapshots and application/process telemetry storage.

System Events

Windows/Linux event log collection and related event feeds.

Network Monitoring

Network stats, traffic telemetry, WiFi metrics, and related monitoring.

Remote Access

Remote sessions including shell, relay, EmRemote, and RustDesk access.

Software Management

Installed software inventory plus software install, update, and uninstall actions.

Speedtests

Manual and scheduled speedtests plus endpoint speedtest CLI activation.

Probes

Probe creation, assignment, execution, and probe result collection.

XDR / AV Detection

Agent-side threat detection: suspicious processes, connections, scripts, and services. Disabled by default.

Tenant User Access

These permissions cap what tenant-scoped users in this tenant can see or change, including individual settings tabs, without disabling the licensed platform capability itself.

Sub-Tenants

Location & Address

Search Address

Address

City

State/Province

Country

Postal Code

Region

Latitude

Longitude

Loading WireGuard configuration...

Tracking Mode

Full Tracking

All data sources enabled (customizable below)

Background Only

App usage only, no titles or URLs

Off

No productivity tracking

Data Collection Controls

Active Window & App

Track which applications are in focus

Keystroke Activity

Detect typing (count only — no content)

Keystroke Logging Sensitive

Record actual keystrokes typed

Mouse Activity

Track mouse movement and clicks

Browser URLs

Log full URLs visited in browser

Browser Page Titles

Capture page titles from browser tabs

Network Traffic

Monitor outbound network connections

Periodic Screenshots Privacy

Capture desktop screenshots at intervals

Screenshot interval: seconds

Working Hours (Productivity + Browser)

Productivity and browser data is only stored during these windows (UTC). Use duplicate to copy one day block to multiple days.

Privacy & Anonymization

Blur Sensitive Window Titles

Mask window titles in reports and exports

Exclude Private Browsing Tabs

Skip URLs from incognito / private windows

Anonymize User Identifiers

Replace usernames with stable anonymous IDs — data still associated to correct agent

Data Retention

Productivity Data (days)

Browser History (days)

Alert Auto-clear

Alert Auto-clear Window (hours)

Archives active alerts once they are older than this tenant window.

Reporting Channel Standard (Inherited by Agents)

Per-agent overrides still take precedence over these tenant defaults.

Transport Policy

Channel Priority

Primary HTTPS URL

Primary WSS URL

Secondary HTTPS URL

Secondary WSS URL

Monitoring Interval Standard (Inherited by Agents)

Use larger values to reduce endpoint load. Per-agent interval overrides still take precedence.

System Metrics Interval (seconds)

Process Snapshot Interval (seconds)

Network Poll Interval (seconds)

WiFi Poll Interval (seconds)

Speedtest Policy

Speedtest Minimum Interval (seconds)

Assigned Agents

Hostname	IP	Status	WireGuard	Last Seen	Actions

Select a tenant to view details

Users

Username	Name	Email	Role	Scope	Tenant	Sensitive Data	Created	Last Login	Actions

Roles

Default roles + custom roles

Name	Base Role	Scope	Type	Permissions	Actions

Permission Groups

Fine-grained feature access control

Name	Description	Base Role	Features	System	Actions

Settings

Productivity Rules

URL Categories

Alert Rules

Performance Thresholds

Health Thresholds

WireGuard VPN

Compliance

Two-Factor

Access Logs

Notification Channels

Scheduled Reports

Speedtest

White Label

Productivity Rules

Pattern	Category	Score	Actions

URL Categories

Pattern	Category	Actions

Domain Detail View

Domain	Visits	Last Seen	Category	Actions

Alert Rules

Name	Type	Threshold	Window	Scope	Enabled	Actions

Performance Thresholds

Configure thresholds for browser performance monitoring. Requests exceeding these thresholds will be flagged.

Slow Request (ms)

Large Response (bytes)

Slow Interaction (ms)

High Error Rate (%)

Max DOM Nodes

Slow Page Load (ms)

Health Threshold Templates

Configure agent health scoring thresholds per tenant. Each tenant has a default template. Individual agents can override with custom templates.

Filter by Tenant

Tenant	Name	CPU Warn/Crit	Mem Warn/Crit	Disk Warn/Crit	Default	Actions

WireGuard VPN

Configure WireGuard VPN tunnel per tenant. Agents will automatically receive and apply their peer configuration. Requires WireGuard installed on server and agents.

Select a tenant (top-right) to configure WireGuard VPN.

Compliance & Data Minimization

Manage consent records, minimization posture, and DSAR workflows per tenant.

Select a tenant below to manage compliance scope.

Minimization Posture

No tenant selected.

Upsert Consent Record

Tenant Search

Tenant

Agent Search

Agent

Subject Type

Subject ID

Purpose

Legal Basis

Expires At (optional)

Consent Given

Tip: Subject ID is auto-filled from selectors and remains editable for advanced cases.

Notes

Consent Records

Subject	Purpose	Given	Legal Basis	Recorded	Expires	Actions

DSAR Requests

Requester Email

Request Type

Agent ID (optional)

Subject Username (optional)

Notes

ID	Type	Status	Scope	Requested	Processed	Actions

Two-Factor Authentication

Two-Factor Authentication (Authenticator App) Loading...

Use any TOTP-compatible authenticator app (Google Authenticator, Microsoft Authenticator, Authy, 1Password).

Add this secret to your authenticator app:

Authenticator Code

Access Security & Audit Logs

Time	User	Action	Result	Channel	Method	Path	Remote IP

Email Delivery

Global provider for alerts, account notifications, password resets, and scheduled reports.

You control the route explicitly: only the selected primary/failover providers that are enabled will be used. Disabled providers can keep saved credentials without being used.

Enable email delivery

Primary Provider

Failover Provider

From Address

From Name

Reply-To

Test Recipients

Enable SMTP

SMTP Host

SMTP Port

SMTP Username

SMTP Password

SMTP Security

Your chosen port is preserved. Use Require STARTTLS for providers that encrypt on ports like 587 or 2525 after the initial SMTP handshake. Use Implicit TLS/SSL only when the server expects TLS immediately, commonly on port 465.

Enable SendGrid API

SendGrid API Key

Notification Channels

Name	Tenant Scope	Type	Enabled	Last Test	Actions

Scheduled Reports

Name	Type	Schedule	Enabled	Last Run	Actions

Speedtest Orchestration

The scheduler enforces the global minimum interval and caps concurrency. Tenant/sub-tenant overrides and per-agent overrides can disable tests or increase intervals, but they cannot go below the global minimum.

Enable orchestrated speedtests

Queued manual runs still respect active tests and effective intervals.

Override surfaces

Use the tenant detail panel for tenant/sub-tenant policy overrides and the agent reporting modal for endpoint-specific overrides.

Global minimum interval (seconds)

Maximum concurrent tests

Timeout per test (seconds)

Status

White Label / Branding

Customise the software name, logo, and favicon. Changes apply instantly for all users without a server restart.

Software Name

Displayed in the sidebar, login page, browser tab title, and PWA name.

Tagline / Subtitle

Shown below the software name in the sidebar and login page.

Live Preview

emtelle analytics

Endpoint Management

Favicon preview:

Browser tab icon

Logo Image

Recommended: 128×128px or larger, PNG or SVG with transparent background. Max 4MB.

Upload Logo

Current Logo

Default (icon.png)

Favicon

Recommended: 32×32px or 64×64px PNG or ICO. Shown in browser tabs and bookmarks. Max 1MB.

Upload Favicon

Current Favicon

Default (icon.png)

Map View

Tenant Agent MikroTik SNMP Probe

0 nodes • 0 online • 0 offline

Node Details

Vendor Integrations

Ruckus Analytics

PRTG

Ruckus Analytics

Controller

Analytics range

Status

Loading vendor integrations...

Read-only SmartZone analytics for controller health, WLAN usage, switch visibility, device connection history, RF quality, packet-loss-aware incidents, and client issue tracking by domain, zone, AP group, and WLAN.

Domain Scope

Zone Scope

WLAN Scope

No Ruckus VSZ controllers configured

Add a tenant-scoped SmartZone controller to start collecting AP inventory, switch visibility, client connection history, signal quality metrics, trace/audit events, and derived health or incident analytics.

Health Trends

RF / Capacity Trends

Top Zones & WLANs

Client Issue Summary

Top Access Points

Top Applications last 24h

Most Active Clients last 24h

Connection Activity

Incident Breakdown

Switch Topology

Port Mismatches

Recent Topology Changes

Domains

Zones

AP Groups

WLANs

Discovered Switches

AVC Application Coverage

Rows

Telemetry Model

AVC catalog + policy coverage (not per-visit telemetry)

Loading application reporting notes...

WLAN Visibility Coverage

AVC Policies

Referenced Categories

Referenced Applications

Access Points

Status

Rows

Switch Inventory

Status

Rows

Connected Clients

Issue

Rows

Client Session History

Status

Rows

Device Trace & Audit

Event Type

Rows

Incidents

Status

Rows

Severity

Operational Events

Severity

Rows

Source

MQTT Broker Setup

Loading broker info…

Application Usage

Top Applications & Websites

Loading…

Client Breakdown

Loading…

PRTG

PRTG Server

Rows

Status

Loading PRTG integrations...

Read-only PRTG inventory for probes, device trees, dependency chains, and failing sensors so network topology, reporting, and cross-platform infrastructure mapping can be correlated with the Ruckus data model.

No PRTG servers are configured for this tenant yet.

Sync Scope

Ruckus Scope Associations

Probes

Dependencies

Devices

Problem Sensors

About & Compliance

Technical Reference Document

v1.5.4

Comprehensive technical documentation covering all platform features, architecture, security model, compliance controls, and deployment guide. Available for download in PDF and DOCX formats, or view inline below.

Platform Components

Server	Node.js / Express / PostgreSQL	v1.0.0
Agent	Cross-platform monitoring service	v1.5.4
Extension	Browser MV3 (Chrome/Edge/Brave)	v2.0.2

Feature Categories

System Monitoring Process Management Productivity Browser Analytics Network Probes Traffic Filtering ISP/MikroTik SNMP Remote Access WireGuard VPN Alerting Multi-Tenancy RBAC Compliance

Technical Reference — Inline Viewer

Formal Security & Compliance Position

Emtelle Analytics enforces secure-by-default controls for identity, tenant isolation, encrypted transport, auditability, data minimization, and consent-aware sensitive tracking.

Security Controls

TLS-secured transport for dashboard/API/WebSocket channels.
Role-based access control with per-feature full/read-only/hidden modes.
Tenant-scope enforcement to prevent cross-tenant access paths.
Authentication hardening with lockout and rate limiting.
Mutation audit logging for operational and compliance traceability.

Privacy & Compliance Controls

Consent-aware minimization clamps for sensitive capture (keystrokes/screenshots).
Tenant/agent consent lifecycle management (record, revoke, expiry).
DSAR workflows for export/delete requests with controlled processing.
Retention and minimization policies applied to telemetry and media data.
Operator-facing compliance workflows in Settings → Compliance.

Feature Stability Assessment

Feature Area	Status	Notes
System Metrics Collection	Stable	Core functionality, well-tested with systeminformation
Process Monitoring	Stable	54-category classification, remote termination
Productivity Tracking	Stable	Active window + idle detection, configurable modes
Browser Extension	Stable	MV3 compliant, Core Web Vitals collection
Network Probes	Stable	5 probe types (ICMP, HTTP, DNS, TCP, MTR)
Traffic Filtering	Moderate	Policy push working; enforcement edge cases under review
ISP/MikroTik	Moderate	Core operations functional; connection stability improving
SNMP Monitoring	Moderate	Vendor profiles seeded; polling infrastructure active
Remote Access	Stable	RDP/SSH/RustDesk with approval workflow
WireGuard VPN	Stable	Auto-recovery, health monitoring, channel priority
Agent Self-Update	Stable	SHA-256 verification, atomic swap, backup retention
Multi-Tenancy	Stable	Full data isolation with RBAC scoping

Downloadable Documentation

Download formal documentation for security posture, privacy controls, compliance mapping, and full technical reference.

Document	Description	Format
Technical Reference	Complete platform documentation — architecture, features, security, deployment, and API reference.	PDF / DOCX
Security & Compliance Statement	Platform security model, control coverage, and operational safeguards.	TXT
Privacy & Data Protection Policy	Data handling, lawful basis, minimization, retention, and subject-rights operations.	TXT
Compliance Control Matrix	Control-to-regulation mapping (POPIA/GDPR/ISO27001-aligned control families).	CSV
Endpoint AV Hardening Guide	Compliant endpoint anti-malware posture (code-signing, allowlisting, trusted paths, transparent service behavior).	TXT

Traffic Rule

Name

Layer

Pattern

Action

Priority

Enabled

URL Filter

Pattern

Type

Action

Category Group

Custom Category

Show customizable blocked page

Blocked page title

Blocked page message

Redirect URL (optional)

Enabled

Network Probe

Probe Profile

Selecting a profile applies its standardized config and agent template on save.

Name

Notification Configuration

Enable probe failure alerts

Trigger after consecutive failures

Cooldown (minutes)

Severity

Send recovery notification

Channels

Dashboard Email Webhook

Webhook URL (optional)

Saved Notification Channels

Route probe and sensor alerts through saved Slack, Teams, webhook, email, or SMS channels.

Description

Target

Type

Interval (sec)

Enabled

Thresholds

Latency Warn (ms)

Latency Critical (ms)

Loss Warn (%)

Loss Critical (%)

Response Time Warn (ms)

Response Time Critical (ms)

TCP Connect Warn (ms)

TCP Connect Critical (ms)

Probe Sensor

Sensor Name

Metric Key

Warning Operator

Warning Threshold

Critical Operator

Critical Threshold

Linked SNMP Device

Cross-talk Mode

Enabled

Recent Readings

No readings loaded.

Time	Agent	Value	Status

Assign Agents to Probe

Add Agents

Probe Profiles

Profiles standardize probe config, thresholds, alerts, and agent templates.

Name	Tenant	Type	Category	Agents	Actions

Probe Profile

Name

Tenant Scope

Notification Configuration

Enable probe failure alerts

Trigger after consecutive failures

Cooldown (minutes)

Severity

Send recovery notification

Channels

Dashboard Email Webhook

Webhook URL (optional)

Saved Notification Channels

Thresholds

Latency Warn (ms)

Latency Critical (ms)

Loss Warn (%)

Loss Critical (%)

Response Time Warn (ms)

Response Time Critical (ms)

TCP Connect Warn (ms)

TCP Connect Critical (ms)

Bulk Edit Probes

Apply a profile, adjust common config, or change assignments for the currently selected probes.

Selected Probes

Probe Profile

Agent Assignment

Assignment Mode

Agent Scope

Current selection

Agents

Threshold Overrides

Latency Warn (ms)

Latency Critical (ms)

Loss Warn (%)

Loss Critical (%)

Response Time Warn (ms)

Response Time Critical (ms)

TCP Connect Warn (ms)

TCP Connect Critical (ms)

Start Security Scan

Agent

Scan Type

Target (IP/hostname)

Port Range

Scan scope

Auto-create network map from findings

Auto-create probes (ping, traceroute, dns, http, tcp)

Probe interval (seconds)

Probe timeout (ms)

XDR / AV Settings

Enable XDR / AV Detection

When enabled, agents will run periodic vulnerability and threat scans. Disabled by default.

Detection Sensitivity

Auto-scan Interval

Auto-block critical threats

Alert on detection

Monitor processes

Monitor connections

Monitor scripts & persistence

Monitor services

Supplementary mode (works alongside existing AV)

Threat Detail

New Network Scan

Agent

Scan Type

Target (IP/CIDR/hostname)

Port Range

Auto-create network map

Auto-create probes from results

Probe Types

Ping TCP DNS HTTP/S Traceroute

Probe Interval (seconds)

Assign to Tenant

New Remote Session

Agent

Source Agent (requesting host)

Session Type

Use WireGuard control path (recommended)

Use relay mode (operator connects via server)

Target Host

Target Port

Standard launch mode (recommended)

RustDesk unattended password (optional)

If provided, the agent will attempt to apply this as the RustDesk permanent password for unattended access.

Alert Rule

Name

Alert Type

Threshold

Duration (min)

Cooldown (min)

Applies To (agent IDs / hostnames)

Enabled

Notification Channels

Hold Ctrl/Cmd to select multiple channels

Alert Management Rule

Name

Description

Action

Status Enabled

Alert Types

Leave empty to match any alert type.

Severities

Leave empty to match any severity.

Agents / Hosts (comma-separated)

Message Contains

Only trigger when similar alerts repeat

Similar Window (hours)

Similar Count Threshold

Notification Channel

Name

Type

Tenant Scope

Global channels are visible everywhere. Tenant channels are only usable by that tenant and its scoped resources.

Webhook URL

Custom Headers (JSON)

Enabled

Scheduled Report

Name

Report Type

Cron Schedule

Cron: min hour day month weekday (e.g. 0 8 * * 1 = Mon 8AM)

Timezone

Format

Delivery Channels

Enabled

Health Threshold Template

Tenant

Name

CPU Warning (%)

CPU Critical (%)

Memory Warning (%)

Memory Critical (%)

Disk Warning (%)

Disk Critical (%)

Offline Timeout (min)

Stale Heartbeat (min)

Set as default for this tenant

Change Password

Current

New

Confirm

Two-Factor Authentication Loading...

Enroll this account with a TOTP authenticator app.

Add this secret to your authenticator app:

Authenticator Code

Reset Password

Username or Email

We will email a reset link if the account exists and email delivery is configured.

Choose New Password

Checking reset link...

New Password

Confirm Password

Set New Password

You must change the default password.

New Password

Confirm

Generate Certificate

Common Name

Valid Days

Let's Encrypt Certificate

Obtain a free TLS certificate from Let's Encrypt via ACME HTTP-01 challenge. Your domain must resolve to this server and port 80 must be reachable from the internet.

Domain

Use staging (test only, not trusted)

Add Nginx Domain

Add a domain to nginx management. A Let's Encrypt certificate will be automatically issued using the webroot method. The domain must resolve to this server's IP and port 80 must be reachable from the internet.

Domain Name

Contact Email (for Let's Encrypt)

Create User

Username

Password

First Name

Last Name

Role

Scope

Tenant

Hide sensitive interactions/search data

Permissions Override (optional JSON array or comma-separated)

Feature Access Override

Edit User

Username

First Name

Last Name

Role

Scope

Tenant

Active

Hide sensitive interactions/search data

Reset Password (optional)

Permissions Override (optional JSON array or comma-separated)

Feature Access Override

Dialog

Create Role

Role Name

Description

Base Role

Scope

Permissions (optional JSON array or comma-separated)

Feature Access Override

Tenant

Name

Description

Contact Email

Max Agents (0 = unlimited)

Assign Agents to Tenant

Quick Allocate Agent

Agent

—

Assign to Tenant

Migrate / Re-Allocate Agent

Agent

—

Current Tenant

—

Migrate to Tenant

All historical data for this agent will be moved to the new tenant.

Add WireGuard Peer

WireGuard Config

Review and edit the raw tenant WireGuard config (<interface>.conf) below. Changes are saved to the database — click Re-deploy to push to the agent.

Hourly Drill-Down

Visit Details

MTR Run Detail

Screenshot Viewer

0 / 0

No screenshot selected.

Agent Configuration Override

Overrides apply to agent: . Leave blank to inherit from tenant/global defaults.

Tracking

Intervals

Thresholds

Reporting Channels

Productivity Tracking Mode

Full Background Off Inherit

Active window tracking Keystroke activity tracking Keystroke logging (sensitive) Mouse activity tracking Browser URL tracking Browser title tracking Network traffic tracking Screenshot capture (sensitive) Privacy: blur window titles Privacy: exclude URLs Privacy: anonymize users

Screenshot interval (seconds)

System Metrics Interval (seconds)

Process Snapshot Interval (seconds)

Network Poll Interval (seconds)

WiFi Poll Interval (seconds)

Speedtest Policy

Speedtest Minimum Interval (seconds)

CPU Warning (%)

CPU Critical (%)

Memory Warning (%)

Memory Critical (%)

Disk Warning (%)

Disk Critical (%)

Transport Policy

Channel Priority Order

Primary HTTPS Domain / URL

Primary WebSocket URL (optional)

Secondary HTTPS Domain / URL

Secondary WebSocket URL (optional)

Create Network Map

Tenant