What does a value of 2 in the SensorHeartbeat event indicate for a host?

A value of 2 in the SensorHeartbeat event indicates that the sensor is in Reduced Functionality Mode. This status means that while the sensor is still operational and able to perform some functions, it is not operating at its full capability. Typically, when a sensor enters Reduced Functionality Mode, it may be due to various factors such as resource constraints, network issues, or the need for maintenance or updates.

Understanding the SensorHeartbeat values is crucial for effective monitoring and management of endpoints within the Falcon platform. Different numeric values indicate specific operational states, and recognizing what a value of 2 signifies allows administrators to take appropriate measures to restore or maintain the sensor's full operational capacity.