Events and sourcesPlatform: is NightWatch working and is data arriving. Exposure: cloud security findings in your estate. Threats are under SOC · Incidents.
What the sources sent in the last 24 hours, and whether every source is delivering.
What changed on this page
One Sources page for every source and connector: what was the Connectors tab, and the connector sign-in, freshness, coverage, blind-spot, ingestion and Office 365 sections of Platform health, and the connector inventory of Engineering.
Five states everywhere (Healthy, Slow, Failing, Off, Unknown), each with an icon so it reads without colour; the old words are in the tooltip. Each tile shows its freshness against what is expected, its sign-in and its last run, and opens one drawer per source. Re-sync is in the drawer, for the platform admin, and asks for a reason.
Reading the sources…
Connector sign-in
Loading…
Client and license
Client Loading…
License Loading…
Deployment intent and observed delivery are separate. A configured license is not proof of Microsoft entitlement.
Billing Open to read the subscription
Your NightWatch subscription, as Paddle last reported it. Manage billing opens Paddle's customer portal (platform admin only).
Plan Open to read what your plan includes
What your plan includes, and what a higher plan adds. Usage is information only: every event is investigated in every plan.
Contract Open to read what NightWatch sets and what you control
Loading…
Ingestion
Loading…
Office 365 counts
Loading…
Coverage by scope
Loading…
Blind spots
Loading…
Sources no connector reads
Loading…
Other integrations and case systems
ISOC in the Defender portal: Checking…. Defender XDR alert ingestion covers alerts, not SIEM, SOAR or ISOC access.
TheHive and ServiceNow: not connected. Cases are ticketed in the ITSM; references recorded on a case before that stay readable on the case page, read only. Automatic creation, status sync and provider-side actions are not enabled.
Freshness, source by source
Loading…
Connector inventory every source that delivered, live or replayed
Loading…