Device matrix

The device matrix is one row per device, one column per source category — RMM, Intune (MDM), EDR, DNS filter, and Billed (PSA) — showing what each of your connected tools says about that device at a glance. (Ledger does not connect to DNS filtering services, so the DNS filter column has nothing to show.)

Reading the symbols

Each cell is one of five states. Getting these right matters: Ledger never conflates "this client doesn't use this source" with "this device is missing from a source it should be in" — that distinction is the whole point of the matrix.

Symbol	State	Meaning
✓ (green)	Present	This source has seen the device recently (within 30 days).
✓ (grey, with an age badge)	Present, stale	This source has data for the device, but its last sighting is older than 30 days.
✗ (red)	Missing	The client is scoped to this source category, but this device has no record there at all — an honest gap.
— (grey)	Not applicable	This client doesn't use this source category at all — there is nothing to be missing.
◐ (amber)	Count-only	Billed column only, for a client whose PSA agreement bills by quantity rather than by named device — see billing reconciliation.

"—" and "✗" are never the same thing and never rendered the same way. "—" means the source category isn't part of this client's scope in the first place (they don't buy DNS filtering, say); "✗" means the client does use that source category, and this specific device is absent from it — something worth investigating. Which sources are "in scope" for a client is derived from what that client's other devices are actually seen by, never guessed or hand-configured.

The Billed column is a special case

A PSA record only ever asserts that a device is billed, never that it is alive — a ConnectWise configuration has no "last seen" of its own. So the Billed column never shows the stale variant: it's either present (billed), count-only (this client's agreement can only be reconciled by quantity, not by device), missing (in scope but not billed), or not applicable.

Other row information

Each row also shows the device's client (or none, if unmapped), confidence in how its records were matched into one device, last-seen time, and any open exceptions with their severity. Rows can be filtered by client, and the same view is available as a CSV/XLSX export — the exported cell values are the exact tokens behind these symbols (OK, OK_STALE, MISSING, N/A, COUNT_ONLY), so an export can never disagree with what you see on screen.