Query Hub

Eido's reporting engine, the library of ready-made reports that comes with it, and how to find, run and adapt one.

Query Hub is where you ask your own questions of the data Eido holds. Every list, chart and count elsewhere in Eido is built on the same engine, and Query Hub gives you that engine directly: pick a set of data, choose the columns, filter it, group it, chart it, then save the result as a report.

Query Hub is in the sidebar for everybody who can sign in. It opens on the report library, which holds three things: the reports Eido ships with, the reports your colleagues have shared, and your own.

What you see in any report is always limited to the devices, users and customers your role allows. Two people running the same report can get different rows.

Where Odie is switched on, a strip across the top of the report library says the same thing this page does: Ask Odie to do it. It is much easier. Ask Odie opens him, and the cross puts the strip away for good in that browser.

The Query Hub report library, with categories on the left and one card per report.
The Query Hub report library, with categories on the left and one card per report.

How the library is laid out#

The left-hand panel, Categories, has an All Reports entry and three sections. Each section lists the categories that have at least one report in it, with a count beside each.

SectionWhat is in it
Out of the BoxThe reports Eido ships with. Everybody sees these. They cannot be changed or deleted.
Shared With YouReports other people have saved and switched Shared on for.
My ReportsReports you saved yourself, shared or not.

Press a section to see everything in it, or a category under it to narrow further. The arrow at the right of a section header folds it away. Filter categories… at the top narrows the list of categories, and Search reports… above the cards searches report names and descriptions within whatever you have selected.

Reading a report card#

On the cardMeaning
Table, Bar, Pie or TileHow the report presents its results.
SystemOne of the built-in reports.
SharedSomebody saved this report and shared it.
ScheduledThe report is emailed on a schedule. Hover over the badge for how often.
The name and descriptionWhat the report is for. A report saved without a description shows “No description provided.”
A person’s nameWho owns the report. Built-in reports have no owner.
The pencilOpens the report with the query builder showing, ready to change.
RunOpens the report and shows the results.
The binDeletes the report. Only on reports you own.

Run a report#

  1. Find the report

    Pick a category, or type part of its name into Search reports….

  2. Press Run

    The report opens in a panel over the page and runs straight away.

  3. Work with the results

    In a table, press a column heading to sort, use the arrows at the foot to page, and press Export as CSV to download every matching row. In a chart, press a bar or a slice to see the rows behind it. See Filters, grouping and charts.

  4. Close it

    Press the cross at the top right, or click the dimmed page behind the panel.

In reports on devices, pressing a row opens that device’s details. See Device details.

Change a built-in report#

Built-in reports are read only, but any of them can be the starting point for your own.

  1. Open the report with the pencil, or press Run and then Edit.
  2. Change the filters, columns, grouping or chart, and press Preview.
  3. Press Save As, give it a name and a category, and save.

Your copy appears under My Reports. The original is untouched. Saving and exporting reports covers the rest.

Start from nothing#

Build Custom Report, at the top right, opens an empty query builder. Building a query takes you through it.

The built-in reports#

Eido ships with more than a hundred reports. They are grouped below by the category you will find them under.

Overview#

ReportThe question it answers
Device Health OverviewHow is the estate split between healthy and unhealthy devices?
Fleet Summary by OSHow many devices run each operating system?
Devices by Device Category, Devices by Management AgentHow do devices split by Intune category, and by how they are managed?
Devices by Manufacturer, Devices by ModelWhat hardware do we have, for buying and lifecycle planning?
Devices by Office Location, Devices by Country, Devices by DepartmentWhere are the devices, going by their primary user?

Compliance#

ReportThe question it answers
Non-Compliant DevicesWhich devices are not compliant?
Compliance Status BreakdownWhat share of devices is compliant?
Non-Compliant Devices by OS, by Department, by Country, by Office LocationWhere is non-compliance concentrated?
High Severity Compliance DevicesWhich compliance failures need attention first?
Non-Compliant BYOD Devices, Non-Compliant Corporate DevicesWhich personal, and which company-owned, devices are not compliant?
Unencrypted Devices, Unencrypted Windows Devices, Unencrypted macOS DevicesWhich devices are not encrypted?

Configuration, Policy Health and Policy Settings#

ReportThe question it answers
Configuration Issues, Configuration Issues by Severity, Configuration Issues by OSWhich configuration policies are failing, how badly, and on which platforms?
High Severity Configuration IssuesWhich configuration failures are most serious, and on which devices?
Compliance Policy Summary, Configuration Policy SummaryHow healthy is each policy across everything it is assigned to?
Compliance Policy Detail, Configuration Policy DetailWhat is the status of each policy on each device?
Proactive Remediation Summary, Script Run State SummaryHow are remediations and scripts doing across the devices they run on?
Active Malware SummaryWhich malware has been detected, and how much of it is still active?
All Policy SettingsWhat is every setting in every policy?
Setting Overlap (by device)Which settings reach the same device from more than one policy?
Setting Conflicts (by device)Which settings reach the same device with different values?
Policy Setting ChangesWhen was a setting changed or removed?

Policy Management#

ReportThe question it answers
Policies by TypeHow many policies of each type are there?
Policies Behind Template VersionWhich deployed policies are on an older version of their template?
Policy Template Config Drifts, Templates with Drifts by TypeWhich templates have deployed policies that have drifted from them?
Templates with Most DeploymentsWhich templates are used most?

App Deployment and Discovered Apps#

ReportThe question it answers
App Deployment Issues, App Deployment Open Issues by SeverityWhich apps are failing to install, and how serious is it?
High Severity App Deployment FailuresWhich app failures need attention first, and on which devices?
Managed App Summary, Managed App DetailHow healthy is each managed app overall, and on each device?
Most Installed ApplicationsWhich discovered applications are on the most devices?
Apps by PlatformHow do discovered applications split across platforms?
Application Version SprawlWhich applications are installed in five or more different versions?

Security and Mobile Devices#

ReportThe question it answers
Personal vs Corporate DevicesHow much of the estate is personally owned?
Unsupervised iOS DevicesWhich iOS devices are not supervised?
Devices with Lost Mode EnabledWhich devices are in lost mode?
Devices Without Serial NumbersWhich devices cannot be matched to an asset record?
iOS Devices, Android DevicesWhich mobile devices do we manage?
Mobile Devices by CarrierWhich mobile carriers are our devices on?

Device Health and Warranty#

ReportThe question it answers
Stale Devices (>30 Days), and the Windows, macOS and mobile versionsWhich devices have not synced with Intune for over 30 days?
Recently Active DevicesWhich devices have synced in the last 7 days?
High Severity DevicesWhich devices have a high-severity status in any area?
Unknown Status DevicesWhich devices does Eido not have enough data on to grade?
Devices with Low Disk Space, Devices with Critical Disk SpaceWhich devices are over 90%, and over 95%, full?
Expired Warranty DevicesWhich devices are out of warranty?
Warranty Unknown DevicesWhich devices have no warranty information?

Patching & OS, Update Rings and Drivers#

ReportThe question it answers
Devices Behind on Patches, macOS Devices Behind on PatchesWhich devices are not up to date?
Unpatched Devices by OS, Unpatched Devices by DepartmentWhere are the unpatched devices?
Patch Support Status OverviewHow does the estate split by patch support status?
OS Distribution, Devices by Major OSWhich operating systems and versions are in use?
Windows 10 Devices, Windows 11 DevicesHow far along is the move to Windows 11?
The Windows OS version sprawl reportHow many different Windows builds are in use?
Devices by Update Ring, Overdue Devices by Ring, Overdue DevicesWhich update ring is each device in, and which rings have overdue devices?
Patch Status BreakdownFor each device and security patch, is it installed, pending, deferred or overdue?
Outstanding Patches by KBWhich security patches are still missing from the most devices?
Pending Driver Review, Approved Drivers, Declined DriversWhich Windows drivers are waiting for a decision, and which have had one?

Issues#

ReportThe question it answers
Open IssuesWhat is wrong right now?
Open High-Severity Issues, Open Medium-Severity IssuesWhat is wrong at each severity?
Open Issues by Severity, by Category, by DepartmentWhere are the open issues concentrated?
Open Compliance Issues, Configuration Issues (Open), Open App Installation Failures, Open Patch IssuesWhat is open in each category?
Long-Running Open IssuesWhich issues have been open for more than 30 days?
Recently Resolved IssuesWhat was fixed in the last 7 days?

Autopilot#

ReportThe question it answers
Recent Autopilot DeploymentsWhich devices were deployed in the last 7 days?
Autopilot Deployment StatusHow many deployments in the last 30 days succeeded?
Failed Autopilot DeploymentsWhich deployments failed in the last 30 days?
Slow Autopilot DeploymentsWhich deployments took more than 60 minutes?
Autopilot ESP Device Setup Failures, Autopilot ESP User Setup FailuresWhich deployments failed at each stage of the Enrollment Status Page?
Autopilot Deployments by Profile, by OS Version, Autopilot by Enrollment MethodHow do deployments split by profile, Windows version and enrolment method?

Users#

ReportThe question it answers
Users with Most Devices, Multi-Device UsersWho has the most devices, and who has three or more?
Users with Non-Compliant Devices, with Configuration Issues, with Patch Issues, with App Deployment IssuesWhose devices have a problem in each area?
Users by Department, by Country, by City, by CompanyHow are users distributed?

Software Metering, Audit and Hardware#

ReportThe question it answers
Most Used Applications, Least Used ApplicationsWhich metered applications are used by the most, and the fewest, people?
Heavy Usage ApplicationsWhich applications average more than 10 hours per user?
Apps with Multiple VersionsWhich metered applications are in use in more than three versions?
Intune Audit LogWho changed what in Intune?
Failed Admin OperationsWhich changes in Intune failed?
Lenovo Product InfoWhat is the factory specification of each Lenovo device?

Questions#

Why do I see fewer reports than a colleague?#

A report is listed only if you are allowed to use the data it reads. If your role blocks a set of data, reports built on it disappear from your library, built-in ones included. An administrator sets this on the role. See Roles.

Reports also belong to where they were saved. A report saved while working inside one customer is listed only for people working inside that customer.

Why can I not change or delete a report?#

You can change and delete only reports you own. For anything else, open it and use Save As to make your own copy.

Where are favourites and recent reports?#

There are none. Use Search reports…, or save your own copy under a category of your choosing so that it is easy to find under My Reports.

A report I saved has vanished. Where did it go?#

Check that you are working in the same customer as when you saved it. If its data has since been blocked for your role, the report is hidden until that is undone.

Which region is your Eido account in?

Each region has its own sign-in, so this page opens in the region you choose.

Not sure? The Login to Eido button in your welcome email opens the right one. See finding your region.

Does your organisation have its own Eido address, such as yourcompany.eido.io? Use the help there instead, at yourcompany.eido.io/help.

Popular

Your first dayA guided tour of a newly connected tenant, from the Get Started page to your first dashboard, device, report and alert.User guideDevice detailsEverything Eido knows about one device, from its hardware and patches to every policy and app assigned to it.User guidePatch ComplianceWhich devices are behind on security patches, how far behind, and how Eido decides when that becomes a problem.User guideBuilding a queryChoosing a view, picking columns, sorting and paging the results, and what every view in Query Hub holds.Query HubThings to ask OdieExample requests for Odie, grouped by what you get back, from a quick count to a finished dashboard, a workbook or a report in your inbox.User guideApp MeteringSee which applications are really used, by whom and for how long.User guideAlertsSend an email, a Slack or Teams message, a webhook call or a ServiceNow incident when Eido raises or clears an issue.AdministrationConnecting IntuneLinking your first Intune tenant to Eido, including who has to approve it, the access level to choose, what Microsoft asks you to accept and what happens during the first sync.Set up and account