uberAgent Explained: Machine Inventory, Timer Configuration
This is the first in a series of articles that highlight and explain specific aspects of uberAgent’s functionality.
uberAgent’s focus is on user experience. Our goal is to provide high-quality metrics that enable you to determine exactly what is going on: how many users are logged on, how long the logon takes, what happens during the logon, which applications are running, what slows them down, and much more. How does inventory data fit into all this?
In order to understand what is happening, you first need to know what you have. Machine inventory data provides a solid foundation to base decisions on and helps answer questions like these:
- Which hardware models do we have? How many of each?
- Which BIOS versions are out there? Do all machines have the same?
- Which operating systems are our clients and servers running?
- How many machines have a specific OS service pack?
- When was the operating system installed?
- How is the rollout of the new OS progressing?
What does the machine inventory data collected by uberAgent look like? Here is a sample screenshot showing an excerpt from the corresponding dashboard:
As you can see, uberAgent collects the following information for each machine:
- Computername (host)
- Operating system: name
- Operating system: version
- Operating system: build number
- Operating system: service pack name
- Operating system: service pack version
- Operating system: type
- Operating system: install date
- Hardware manufacturer
- Hardware model
- BIOS version
A full list of all metrics collected by uberAgent can be found here.
Like its other metrics, uberAgent’s machine inventory collection can be configured flexibly. In order to configure metrics we first need to set up a timer.
Timers do nothing most of the time. They sleep. Occasionally, they wake up and collect the metrics associated with them. Then they go back to sleep. Nice life they have!
We can set up a new timer simply by adding a new timer section to the configuration:
[Timer] Name = Inventory Comment = Perform an inventory at a very low frequency
The comment is optional. A name is recommended to make it easier to identify the timer in the log file.
Next we need to specifiy how often we want the timer to wake up, i.e. the interval, aka data collection frequency:
Interval = 86400000 Start delay = 600000 Persist interval = true
The interval is specified in milliseconds, thus the large number. 86400 seconds are equivalent to 24 hours, so we are collecting machine inventory data once per day. We also configured a
start delay. This is optional, but useful for metrics like inventory, which we do not need right after the machine has booted. In this case, uberAgent waits 10 minutes after startup before it gathers the inventory information.
Persist interval tells uberAgent to remember when it last collected data for the timer.
Finally, we associate metrics with the timer:
UA metric = ApplicationInventory UA metric = SoftwareUpdateInventory UA metric = MachineInventory
Each timer can have an arbitrary number of metrics it collects data for.
Inventory data collection is not terribly important from a timing point of view. It does not matter whether it arrives a few milliseconds earlier or later. For that reason we assign this timer a low (background) priority:
Thread priority = background
That’s it. We configured a timer for inventory data collection. The full configuration looks like this:
[Timer] Name = Inventory Comment = Perform an inventory at a very low frequency Interval = 86400000 Start delay = 600000 Persist interval = true Thread priority = background UA metric = ApplicationInventory UA metric = SoftwareUpdateInventory UA metric = MachineInventory
If you like this configuration and want to apply it to your uberAgent configuration: no need to do that. What you see here is the default configuration uberAgent comes with right out of the box. Just install uberAgent and it will immediately start collecting all this great data.
uberAgent is an innovative Windows and macOS user experience monitoring (UXM) and endpoint security analytics (ESA) product. UXM highlights include detailed information about boot and logon duration, application unresponsiveness detection, network reliability drill-downs, process startup duration, application usage metering, browser performance, web app metrics, and Citrix insights. ESA comes with a sophisticated activity monitoring engine, the uAQL query language, detection of risky activity, DNS query monitoring, hash calculation, registry monitoring, and Authenticode signature verification.
About vast limits
vast limits GmbH is the company behind uberAgent, the innovative user experience monitoring and endpoint security analytics product. vast limits’ customer list includes organizations from industries like finance, healthcare, professional services, and education, ranging from medium-sized businesses to global enterprises. vast limits’ network of qualified solution partners ensures best-in-class service and support anywhere in the world.