HEXR

Heartbeat

Reporting
2 / 2
every 60 s
Identity plane
6 srv · 10 agt
ready pods, both clusters
Evidence (24h)
7,631
Signed (24h)
6,398
84% of rows

Latest heartbeat per cluster

GET /v1/heartbeat/history?limit=48
HealthClusterTenantSPIREAgentsSigned / All (24h)Denied (24h)VersionSilent for
healthyclu_971aac2644a01dd7827635c1globex-azure3 srv · 4 agt13,639 / 4,8661,227 of 3,680 callshexr-license-agent/0.3.350s
healthyclu_d6e475d4df7966e2fbca13efacme-aws3 srv · 6 agt22,759 / 2,7655 of 1,546 callshexr-license-agent/0.3.39s

What a heartbeat carries, and why

Identity plane, alive and counted. Absent until 2026-09-17. A cluster ran 74 days with no identity server while every heartbeat was accepted, because nothing asked.
Signed, not just counted. Rows written under a fallback identity count as rows. Only signed rows mean the product is working.
A verdict, in words. The agent classifies its own cluster and says why. Silence for six minutes is a state too.
Refusals, counted. A plane whose every call is refused used to look healthy, because refusals are rows. Since 2026-09-20 the heartbeat carries the denial count; ten or more calls with nine in ten refused is unhealthy. The Azure tenant's 30 % is one undecorated process being refused on purpose.