> ## Documentation Index
> Fetch the complete documentation index at: https://syteca.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Endpoint history

> Monitor the history of endpoint health, policy assignments, and risk factor status changes to understand how an endpoint's security posture evolves over time.

The **Endpoint History** page provides a historical view of changes affecting an endpoint's security posture. Use it to track health score trends, review policy assignment changes, and analyze how risk factors have evolved over time. This information helps administrators investigate security events, understand the impact of configuration changes, and monitor endpoint health over time.

<Note>
  Viewing the Endpoint history page requires the [Viewing Monitoring Results administrative permission](/docs/administration/users/administrative-permissions), plus the [Viewing Monitoring Results Endpoint permission](/docs/administration/users/client-permissions) for the specific endpoint.
</Note>

## Health Change History

A line chart that displays how the endpoint [health score](/docs/espm/endpoint-security-posture-and-health-score#endpoint-health-score) has changed over time. The chart helps identify periods of improvement, degradation, and stability in the endpoint's security posture.

By default, the chart shows all available health score measurements as a continuous timeline without gaps. Use the **Display intervals with no data** option to show periods when no health information was received from the endpoint, such as when the endpoint was offline or unlicensed. Gap widths are proportional to the actual duration of missing data.

The Y-axis represents the health score as a percentage from 0% to 100%. The background  color changes according to the health category of each score, providing a quick visual indication of the endpoint's health status.

Select an area of the chart to zoom in and focus on a specific time range. Click the chart to return to the default view.

Hover over a data point to view detailed information about the health check.

<Frame caption="The health changes widget.">
  <img src="https://mintcdn.com/syteca/FKrkO8bEqEQ6WSgs/images/espm/health_changes.png?fit=max&auto=format&n=FKrkO8bEqEQ6WSgs&q=85&s=2c256eb538fb667826890b092c562c42" alt="The health changes for individual endpoint." width="1876" height="883" data-path="images/espm/health_changes.png" />
</Frame>

## Policy Changes History

The **Policy Changes History** grid provides an audit trail of policy assignment changes [policy assignment changes](/docs/espm/policies/managing-policies)  for the selected endpoint. Use it to review when policies were assigned or removed, identify who performed the action, and track automatic policy assignments.

Data is displayed in the grid:

| Column     | Shows                                                                                                                                        |
| ---------- | -------------------------------------------------------------------------------------------------------------------------------------------- |
| **Date**   | The date and time when the policy was assigned or unassigned. Displayed in the Server timezone.                                              |
| **Event**  | The policy assignment event: **Assigned** or **Unassigned**.                                                                                 |
| **Policy** | The name of the policy. Clicking the policy name opens the Policies page filtered for the selected policy.                                   |
| **User**   | The user who performed the policy assignment or removal. If the policy was assigned automatically via Endpoint Group, the value is **Auto**. |

## Risk Factors History

The **Risk Factors History** grid displays the history of risk factor evaluations for the selected endpoint, including the status of each risk factor at the time of the check.

<Note>
  The grid includes only risk factors whose status/risk score changed during a check. Risk factors that remain unchanged between consecutive checks are not recorded in the history.
</Note>

### Risk Factors Grid

| Column          | Shows                                                                                                                                                                                                               |
| --------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Check Date**  | The date and time when the risk factor check was done in the endpoint timezone at the moment of the check.                                                                                                          |
| **Status**      | The status of the risk factor at the time of the check.                                                                                                                                                             |
| **Risk Factor** | The name of the risk factor. lick it to open risk factor details including remediation instructions.                                                                                                                |
| **Control**     | The list of the controls to which the risk factor belongs in the assigned policies.                                                                                                                                 |
| **Risk Score**  | The [risk level](/docs/espm/about-risk-factors#risk-score-calculation) for the risk factor at the moment of the check. If the risk factor belongs to several policies, then there will be separate rows for each policy. |

### Grid Filters

You can use other filters to find needed data. The filters include:

* Risk factor
* Control
* Risk score by category (Critical, High, Medium, Low, or No Risk)
* Check date
* [Status](/docs/espm/about-risk-factors#risk-factor-statuses)

## Related

<CardGroup cols={2}>
  <Card title="Endpoint details" icon="monitor-check" href="/docs/espm/endpoints/endpoint-details">
    Health trends and actual risk factors on the individual endpoint dashboard.
  </Card>

  <Card title="How to analyze endpoint health trends" icon="workflow" href="ESPM/howto/how-to-change-endpoint-health">
    Review historical endpoint health trends, policy assignment changes, and risk factor activity to understand how an endpoint's security posture has evolved over time.
  </Card>
</CardGroup>
