From what I found it seems to be 'all of the above' and more. The Last Seen is supposed to be updated by the following events of an endpoint:
• Endpoint is added or updated using UI/API/import• After any policy evaluation completes for an endpoint (Authentication)• During post auth entity update• Onguard, MDM, Guest Onboarding and Social login updates------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check
https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------
Original Message:
Sent: Apr 26, 2022 10:19 AM
From: Michael Haring
Subject: Cleanup Interval - Meaning of "last seen"
This is a guess, but I believe it would be either last authentication, last profiling, or last scan if doing network discovery scanning. I would assume it would be tied to the "last profiled at" timestamp. I checked a few devices that I had seen today and the timestamp is from today.
------------------------------
Michael Haring
Original Message:
Sent: Apr 04, 2022 07:22 AM
From: Jonatan Sitter
Subject: Cleanup Interval - Meaning of "last seen"
Hi everybody,
I noticed that in 6.10 the behavior of Cleanup Interval settings configured in "Administration > Server Manager > Server Configuration > Cluster-Wide Parameters" were changed to:
Could somebody explain what exactly is the meaning of "last seen"?
Thanks in advance!
------------------------------
Jonatan Sitter
------------------------------