@honvl, the Runs list for each command logs "Trigger sent" and "Command ran". "Trigger sent" is logged when the TRIGGERcmd server tells the agent to run a command. "Command ran" is logged when the agent actually runs the command and reports back to the server.