This is helpful to someone who's trying to obtain/maintain visibility into a list of endpoints in an organization's Webroot instance whose days since last seen date is greater than 30 days. This is a good Metric for QBRs, recurring site reviews, and an onboarding report. Also, this Metric could be used to build an audit of if there are any endpoints that meet this criteria. This Metric can also be used to create a pointed Actionable Alert that alerts on if an endpoint's days since last seen passes this threshold.
Endpoints[? DaysSinceLastSeen >
29
].join(
, [join(
, [
, to_string(HostName)]), join(
, [
:
, to_string(InternalIP)])])