HealthPlatform: is NightWatch working and is data arriving. Exposure: cloud security findings in your estate. Threats are under SOC · Incidents.
Is NightWatch working, and is anything late, missing or broken?
What changed on this page
One verdict line instead of 22 stacked sections: red and amber float to the top as "Needs attention"; everything else is a small tile in five groups (Live operations, Delivery, Data coming in, Audit integrity, Service level).
Every tile opens one drawer with the same numbers, table and actions as before (Re-sync, Why this?). Five plain states: Healthy, Watch, Failing, Unknown and Off; a check that did not run is Unknown, never Healthy.
Delivery is its own tab: destinations with an outbox lag bar against the alert line, the outbox by destination and the timers. Components now show restarts and start time.
Is the service working?
Reading every check…
The verdict appears once the first reading arrives.
Per-source detail (connectors, coverage by platform, freshness) is also on the Sources page. Components include restarts and start time from the control-plane read.
Loading…
Destinations
Lag bar: the oldest message due, against the 10 min alert lineOutbox by destination
Timers
Connector sign-in
Loading…
Coverage
Loading…
Freshness
Loading…
Ingestion
Loading…
Office 365 counts
Loading…
Blind spots
Loading…
Components
Loading…
Work queue
Loading…
Automation
Loading…
Delivery
Loading…
Outbox lag
Loading…
Timers
Loading…
Audit chain
Loading…
Audit anchors
Loading…
Event search
Loading…
Full audit-chain check
Privileged-action cross-check
Audit export
Playbook mirror
Telemetry
Response times
Loading…
Aged incidents
Loading…