Falcon Sensor Heartbeat Timechart

This query plots a timechart showing the frequency of Falcon sensor heartbeat events across the environment.

CQL · Falcon Next-Gen SIEMCopy query

#event_simpleName=SensorHeartbeat
| timeChart(span=30min, function=count(as=SensorHeartbeat))

falcon_sensor_heartbeat_timechart.yml

ByteRay

Monitoring

Endpoint

Insight

2025-08-26

2025-11-16

Get this query running in your SIEM, with someone on call.

Our Managed SIEM team operates CrowdStrike Falcon Next-Gen SIEM in production, with over 350 battle-tested use cases and 24/7 incident response behind them.

Talk to the SIEM team