– Workspace
Workspace
Open incidents
–
Events · 24h
–
Active devices · 24h
–
Clients reporting · 24h
–
Feed status
–
Latest events
| Time | Client | Device | Vendor | Kind | Message |
|---|
Incidents
Correlated incidents across your fleet — acknowledge, resolve, reopen.
Status
Events
Raw ingested events for your workspace.
| Time | Client | Device | Vendor | Kind | Message |
|---|
Clients
Per-client activity in the selected window.
| Client | Events | Devices | Last event | Health |
|---|
Settings
Detection thresholds and feed endpoints for your workspace.
Detection thresholds
Blank = Crosswatch default (90 min · 3 devices · 2 clients · 12 h).
When the same failure fingerprint hits at least 3 devices across 2 clients within 90 minutes, Crosswatch raises an incident.
Your feed
NinjaOne webhook URL
Generic ingest URL
Send events with the header x-crosswatch-token — your access token doubles as the ingest token.
Ingest token
Your current token stops working immediately — update any feeds/scripts.
Shown once — copy it now. You won't be able to see this token again.
Need data deletion? Contact your Crosswatch administrator.
Team
People who can sign in to this workspace's portal. Invite colleagues with their Microsoft 365 email.
Members
Invite a colleague
They'll sign in with their Microsoft 365 account. New people join as members (view-only); ask your Crosswatch contact to make someone an owner.
Integrations
Connect Microsoft Intune so Crosswatch can watch your managed devices — read-only, polled in the cloud.
Microsoft Intune
Connect your RMM
PSA / ticketing push
Send a Crosswatch incident straight into your PSA as a ticket. Crosswatch creates the ticket — it never touches a device.
Client Fleet Health Report
A branded report you can forward to your client — white-label it, then share a link (print-to-PDF ready).