Skip to main content

Findings & Interactions

Findings & Interactions is the one place to see what people did with AI and what Quilr flagged along the way. Open it from Observe > Findings & Interactions in the sidebar.

Use it to:

  • review findings that may need your attention,
  • look up everything a person or an application did with AI in a period,
  • open a single conversation and see exactly what happened,
  • export a filtered list for a report or an audit.

To close findings in bulk, see the Triage center.

Findings and Interactions​

The two tabs at the top of the page are two ways of looking at the same activity.

TabShowsUse it to
FindingsEvents that matched one of your policies or a data detection, grouped so repeats of the same thing appear once.Review what was flagged and how Quilr responded.
InteractionsEvery AI interaction Quilr captured, from every sensor, whether or not anything was flagged.Answer "what did this person or app do with AI?"

Each finding card reads as one sentence: who did what, in which app, under which policy or detection, and what happened (for example Monitored, Justified, Redacted or Blocked). The severity and the time sit on the left.

On the Interactions tab, turn on Group related conversations to fold related records (for example several prompts in one short session) into a single row.

Choose a layout​

Switch layouts with the Bird's-eye, Cards and Table buttons at the top right. Filters and the period carry across all three.

  • Bird's-eye - summary totals, enforcement over time, enforcement outcomes, and the people and applications that appear most often. Use it to spot trends before you drill into rows.
  • Cards - one readable card per finding or interaction. Best for reviewing a queue.
  • Table - one row per item with sortable columns. Use Columns to choose which columns you see.

Filter the list​

  1. Pick a period from the date menu at the top right (for example Last 7 days). Every count on the page follows it.
  2. Type in the search box to find a person, an application or a policy.
  3. Use the quick filters under the search box. On Findings these are Sensor, Person, App, Category and Outcome. On Interactions they are Sensor, Person, App, Model and Tool.
  4. Click More filters for the full list, including Triage status, Triage reason, Topic, Agent and Device. Each filter shows which sensors it applies to.
  5. Use the All, Open and Resolved toggle to show findings by triage state. Open is the queue that still needs a decision.

Save a view​

When you use the same filters often, click Save new view. Saved views keep the filters, columns and layout, and appear as chips next to All findings so you can return to them in one click. See Views, filters and drawers.

Investigate a conversation​

Click any card or row to open the investigation drawer. The drawer opens over the list, so you keep your place.

  1. Read the Summary tab first. Why it was flagged names the outcome, the policy and control that applied, and any reason the person gave. Triage shows whether the finding is still open or how it was closed. Who & where names the person, the application and the account used.

  2. Open the activity tab to replay what happened. Its name follows the sensor: Capture for the browser, Prompts & completions for the LLM Gateway, Tool calls for the MCP Gateway and Agent activity for the Endpoint Agent. Use All turns, Flagged only or User only to focus, and Copy thread to copy it. Where detected values are involved, a Sensitive data tab lists them masked. Reveal values at the top of the drawer shows them in clear, if your role allows it. Each reveal is recorded in the Audit logs as Requested sensitive data reveal, and copying a conversation as Requested conversation copy.

  3. Open Context for the person's recent history, their top apps and controls, and the client and device the activity came from.

  4. Open Details for the identifiers you may need when you raise a ticket.

  5. Use the buttons along the bottom to keep going: see all activity by the same person or in the same app, review the app in Inventory, open the control, or open the person's profile.

tip

Click Expand at the top of the drawer to view a long conversation full screen.

Export and other actions​

  • Export sends the list you are looking at, with its filters, to the Export Center so you can download it.
  • Activate Agent becomes available when you select findings. See Activate an agent.
  • Triage (next to Export) holds bulk triage actions for the selection and links to the Triage center.
  • The menu on each row copies the request, conversation or context IDs, for support tickets.

Activate an agent​

Activate Agent starts a Quilly agent that follows up with the people behind findings, for example to explain the policy they hit and ask them to fix the issue. It is not the Endpoint Agent, and it does not create a Workflow Agent. The same action is on Users > All users and Users > Accounts, where you select people or accounts and then choose which of their findings to act on.

  1. Select up to 50 findings (or people or accounts), then Activate Agent. Starting from people or accounts adds a first step, Findings and accounts: tick the findings to act on and the accounts to contact. Each checked finding gets its own agent, which acts on each account's latest finding.
  2. Configure agent: choose the Agent. Agents that explain a policy also need a Policy. Optionally set the Tone, the number of Reminders (none to three) and Resolve within (an SLA in hours, days or weeks).
  3. Select Generate plan. Quilly drafts the plan it will follow; read it, and use Regenerate if needed. Each finding shows Ready when it can be activated.
  4. Review the findings and accounts the agent will contact, then Start agent. Each item reports Activated, Failed or Not permitted.

Follow the conversations on the Quilly tab of Users. If activation fails, check that tab before you try again, because some people may already have been contacted. The action is unavailable when your organization or role does not allow agent activation.

Next steps​

On this page