> For the complete documentation index, see [llms.txt](https://docs.expel.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.expel.io/connect-your-technology/security-devices/manage-security-devices.md).

# Manage Security Devices

Your security devices appear on the [Security Devices](#user-content-fn-1)[^1] page. From this page you can add a new security device, monitor the health of your devices, view details about each device's activity, and make changes to your devices if needed.

### View Security Device Details

For more details about a device's ingestion and raw events, health history, or resource usage, use the **Details** screen. Access the Details screen from the [Security Devices](https://workbench.expel.io/settings/security-devices) page by **clicking on the device row** or by using the dropdown menu to select **View details**.

{% hint style="info" %}
This is also where you can find instructions on how to fix an unhealthy device.&#x20;
{% endhint %}

<figure><img src="/files/dpol0WjlFYOhzpGpxmY2" alt="Image showing the dropdown menu, with View Details selected."><figcaption></figcaption></figure>

In the side panel of the Details screen, you will see a number of additional screens that you can toggle through. Find more information about each of these screens here.

<details>

<summary>Health Screen</summary>

Health provides a high-level health check for the device that moves beyond the API connection status to also show raw events and [Expel Alerts](/workbench-reference/expel-terminology.md#expel-alert). You can also see when the device was onboarded, and by whom. For some integrations, you will see a "Configuration" field that indicates whether or not console access is enabled for Expel within the vendor technology.

</details>

<details>

<summary>Ingestion Screen</summary>

Ingestion helps you verify that data is actively moving across the connection and that polling is working properly. You can check the various data timestamps and also the time elapsed since the last successful poll to ensure the connection is actively pulling events into our detection engine.

</details>

<details>

<summary>Events Screen</summary>

Events shows the number of device events that have been processed by our detection engine, and the number of Expel Alerts and associated activity that resulted from those incoming events. Remember that not all events result in Expel Alerts or SOC activity. See [How Expel Alerts Work](/workbench-reference/alerts/how-expel-alerts-work.md) for more information.

</details>

<details>

<summary>Information Screen</summary>

Information shows a read-only view of your basic device information as configured during onboarding.

</details>

<details>

<summary>Device History Screen</summary>

Device history provides a timeline of any changes to your device credentials or to the health of your device.

</details>

<details>

<summary>Usage Screen</summary>

Usage data will show your SaaS users, endpoints for on-prem, cloud resources, or Kubernetes nodes. The content of this screen varies based on the integration, and data is not available for all devices. You can get even more details about usage by downloading the inventory list from this screen, or by going to the [Usage Dashboard](https://workbench.expel.io/settings/usage).&#x20;

</details>

## Add a Security Device

{% hint style="warning" %}
There are steps that must be taken within your vendor technology before you come to this screen to add the security device, and you may also need to set up an [assembler](/connect-your-technology/expel-assembler/about-the-expel-assembler.md) as part of the process.
{% endhint %}

Find your setup guide below, which includes the security device instructions, or look for it in [Expel Integrations](/connect-your-technology/about-integrations/expel-integrations.md).

<button type="button" class="button primary" data-action="search" data-icon="magnifying-glass">Search for an integration</button>

## Edit a Security Device

If you need to make a change to a device that you have already set up, you can do so by locating your device and using the dropdown menu to select **Edit**. You will then see the same setup screen that you saw when you first created the device, and can modify your credentials as necessary.

<figure><img src="/files/8d0wZjhfEvIRGcleHD6l" alt="Image showing the dropdown menu, with Edit selected."><figcaption></figcaption></figure>

## Delete a Security Device

To delete a security device, locate your device and use the dropdown menu to select **Delete**. This action cannot be undone.

<figure><img src="/files/3AC5kyNfBfMxfh2PHZHg" alt="Image showing the dropdown menu, with Delete selected."><figcaption></figcaption></figure>

[^1]: [Organization Settings > Security Devices](https://workbench.expel.io/settings/security-devices)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.expel.io/connect-your-technology/security-devices/manage-security-devices.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
