HEXR

Heartbeat

Reporting
2 / 2
every 60 s
Identity plane
6 srv · 10 agt
ready pods, both clusters
Evidence (24h)
7,518
Signed (24h)
6,276
83% of rows

Latest heartbeat per cluster

GET /v1/heartbeat/history?limit=48
HealthClusterTenantSPIREAgentsSigned / All (24h)Denied (24h)VersionSilent for
healthyclu_971aac2644a01dd7827635c1globex-azure3 srv · 4 agt13,597 / 4,8231,226 of 3,678 callshexr-license-agent/0.3.318s
healthyclu_d6e475d4df7966e2fbca13efacme-aws3 srv · 6 agt22,679 / 2,69515 of 1,504 callshexr-license-agent/0.3.337s

What a heartbeat carries, and why

Identity plane, alive and counted. Absent until 2026-09-17. A cluster ran 74 days with no identity server while every heartbeat was accepted, because nothing asked.
Signed, not just counted. Rows written under a fallback identity count as rows. Only signed rows mean the product is working.
A verdict, in words. The agent classifies its own cluster and says why. Silence for six minutes is a state too.
Refusals, counted. A plane whose every call is refused used to look healthy, because refusals are rows. Since 2026-09-20 the heartbeat carries the denial count; ten or more calls with nine in ten refused is unhealthy. The Azure tenant's 30 % is one undecorated process being refused on purpose.