Skip to content

Dashboard

The Dashboard is the home screen. Its purpose is one question: is the fleet healthy? Everything on the page exists to answer that.

Cards

Fleet summary

Total agents, broken down by health state:

  • Healthy — connected and reporting health.healthy = true.
  • Unhealthy — connected but reporting issues.
  • Unknown — connected without ReportsHealth capability.
  • Disconnected — last seen older than the heartbeat window.

Click any chip to open Fleet pre-filtered to that state.

Drift

How many agents are running a configuration version other than the one assigned to their group, and why:

  • Pending — waiting for the agent to apply.
  • Applying — apply in progress.
  • Failed — agent rejected the config; click to see error.
  • Stale — agent has not reported EffectiveConfig in a while.

A non-zero drift count is normal during a rollout, suspicious any other time.

Rollouts in flight

Currently InProgress or Paused rollouts. Each card shows:

  • name, configuration version, target group,
  • progress bar (batches done / total),
  • the last gate that fired (if paused).

Click into a rollout for the full detail page.

Recent failures

The last 10 rollout-batch failures, agent disconnects after apply, and policy denials. The intent is "show me anything I might have missed in the last hour".

Self-observability

A small embedded panel of the metrics most likely to surprise an operator: WebSocket frames received per minute, active sessions, dispatch forwarded ratio. If your IT setup blocks /metrics exposure to the UI, this card hides itself.

Live updates

Every card subscribes to the live-update bus. A new agent connecting, an apply succeeding, a gate firing — all of these tick the Dashboard without refresh.

What is missing on purpose

The Dashboard does not show:

  • per-agent telemetry volume (that is the agents' backend, not the management plane),
  • audit-log entries (use the Audit page; mixing them in here makes the Dashboard a wall of noise),
  • PKI / certificate status (that is in Settings → PKI; only relevant on rotation days).

The principle is "show me what changed and what is wrong, hide everything else."