Machine Inventory

Contains inventory metrics for machines like operating system name and hardware manufacturer.

Details

• Source type: uberAgent:System:MachineInventory
• Used in dashboards: Machine Inventory, Single Machine Inventory, Single Application Inventory, Update Inventory
• Enabled through configuration setting: MachineInventory
• Related configuration settings: n/a

List of Fields in the Raw Agent Data

Field	Description	Data type	Unit	Example	Platform
OsName	Operating system name	String		Windows 7 Enterprise	all
OsSpName	Operating system service pack name	String		Service Pack 1	Win
OsVersion	Operating system version	Number		6.1	all
OsBuild	Operating system build	Number		7601	Win
OsBuildString	Operating system build	String		19D76	Mac
OsUpdateBuildRevision	Operating system Update Build Revision number. More information.	Number		165	Win
OsArchitecture	Operating system architecture	String		x64	all
OsSpVersion	Operating system service pack version	Number		1.0	Win
OsType	Operating system type. Possible values: Client, Domain Controller, Server, Terminal Server	String		Client	all
OsInstallDate	Operating system installation date	String		2018-04-13	Win
HwManufacturer	Hardware manufacturer	String		LENOVO	all
HwModel	Hardware model	String		ThinPad T470s	all
HwBiosVersion	Hardware bios version	String		N1WET46W (1.25)	Win
AdDomainDns	Active Directory DNS domain name	String		vastlimits.com	Win
AdDomainNetBios	Active Directory NetBios name	String		VASTLIMITS	Win
AdSite	Active Directory site	String		Default-First-Site-Name	Win
AdOu	Active Directory organizational unit	String		vast limits/Computers/Clients	Win
ComputerNameDn	Computer name Dn formatted	String		CN=Client1,OU=Clients,OU=Computers,OU=vast limits,DC=vastlimits,DC=com	Win
ComputerNameCanonical	Computer name canonical formatted	String		vastlimits.com/Computers/Clients/Client1	Win
CtxFarmName	Citrix farm name	String		vast limits Farm	Win
CtxMachineCatalogName	Citrix machine catalog name	String		Machine Catalog 1	Win
CtxDeliveryGroupName	Citrix delivery group name	String		Delivery Group 1	Win
RAMSizeGB	RAM size	Number	GB	15.86	all
PowerSupportsConnectedStandby	Indicates if the operating system supports Connected Standby. Possible values: 0, 1	String		0	Win
PowerSupportsS1	Indicates if the operating system supports sleep state S1. Possible values: 0, 1	String		0	Win
PowerSupportsS2	Indicates if the operating system supports sleep state S2. Possible values: 0, 1	String		0	Win
PowerSupportsS3	Indicates if the operating system supports sleep state S3. Possible values: 0, 1	String		0	Win
PowerSupportsS4	Indicates if the operating system supports sleep state S4. Possible values: 0, 1	String		1	Win
PowerSupportsS5	Indicates if the operating system supports sleep state S5. Possible values: 0, 1	String		1	Win
IsUpsPresent	Indicates if there is an uninterruptible power supply (UPS) present. Possible values: 0, 1	String		0	all
IsBatteryPresent	Indicates if there is a battery present. Possible values: 0, 1	String		1	all
BatteryWearLevelPercent	Percent of battery capacity gone	Number	%	7.8	Win
CPUName	CPU name	String		Intel(R) Core(TM) i7-7500U CPU @ 2.70GHz	all
CPUSockets	CPU sockets	Number		1	Win
CPUCoresPhysical	CPU physical cores	Number		2	all
CPUCoresLogical	CPU logical cores	Number		4	all
CPUMaxMhz	CPU base frequency	Number	MHz	2904	all
HwIsVirtualMachine	Indicates if machine is a virtual machine. Possible values: 0 ,1	String		0	all
BIOSSerial	BIOS serial number	String		YM5S012345	Win
BaseboardSerial	Baseboard serial number	String		50123445	Win
IsSipEnabled	Status of the System Integrity Protection	String		1	Mac

List of Calculated Fields

Field	Description	Data type	Unit	Example	Where available
OsBuildUbr	Operating system build and Update Build Revision combined. For operating systems lower than Windows 10 it is just the content of OsBuild.	Number		17134.165	Splunk data model
HwManufacturerModel	Hardware manufacturer and model combined	String		LENOVO ThinkPad T470s	Splunk data model

Disk Inventory

Contains inventory metrics for physical disks like disk name and capacity.

Details

• Source type: uberAgent:System:DiskInventory
• Used in dashboards: Machine Storage
• Enabled through configuration setting: MachineInventory
• Related configuration settings: n/a

List of Fields in the Raw Agent Data

Field	Description	Data type	Unit	Example	Platform
Name	Disk name	String		SAMSUNG MZVLW1T0HMLH-000L7	all
Enumerator	Disk enumerator (e.g., IDE, SCSI, USBSTOR)	String		SCSI	all
DiskNumber	Disk number	Number		0	all
CapacityMB	Disk capacity	Number	MB	976762	all
IsWritable	Indicates if the disk is writable. Possible values: 0, 1	String		1	all
IsRemovable	Indicates if the disk is removable. Possible values: 0, 1	String		0	all

Monitor Inventory

Contains inventory metrics for monitors like resolution and color depth.

Details

• Source type: uberAgent:System:MonitorInventory
• Used in dashboards: Machine Inventory, Single Machine Inventory
• Enabled through configuration setting: MachineInventory
• Related configuration settings: n/a

List of Fields in the Raw Agent Data

Field	Description	Data type	Unit	Example	Platform
MonitorIndex	Monitor index	Number		1	all
MonitorHRes	Monitor horizontal resolution	Number		3440	all
MonitorVRes	Monitor vertical resolution	Number		1440	all
MonitorColorDepth	Monitor color depth	Number		32	all
MonitorIsPrimary	Indicates if monitor is the primary one. Possible values: 0, 1	String		1	all
MonitorDisplayName	Monitor name	String		Generic PnP Monitor	all

Network Configuration Information

Contains inventory metrics for network connections like interface type and SSIDs.

Details

• Source type: uberAgent:System:NetworkConfigInformation
• Used in dashboards: Machine Inventory, Single Machine Inventory, Machine Network Configuration
• Enabled through configuration setting: NetworkConfigInformation
• Related configuration settings: n/a

List of Fields in the Raw Agent Data

Field	Description	Data type	Unit	Example	Platform
NetworkConfigFriendlyName	Network friendly name	String		WiFi	all
NetworkConfigDescription	Network description	String		Intel(R) Dual Band Wireless-AC 8265	all
NetworkConfigInterfaceType	Network interface type ID. Possible values: 0, 6, 23, 63, 71, 243	Number		71	all
NetworkConfigInterfaceTypeDisplayName	Network interface type name. Possible values: Other, Ethernet, VPN, ISDN, WiFi, WWAN	String		WiFi	all
NetworkConfigDnsSuffix	Network DNS suffix	String		fritz.box	all
NetworkConfigSsid	Network SSID	String		HomeWiFi	all
NetworkConfigIsConnectedToInternet	Indicates if network is connected to the Internet. Possible values: 0, 1	String		1	all
NetworkConfigIPv4	Ipv4 address	IPv4		192.168.178.40	all
NetworkConfigIPv6	Ipv6 address	String		2001:0db8:85a3:0000:0000:8a2e:0370:7334	all
NetworkConfigMACAddress	MAC address	String		AC-ED-5C-02-F0-30	all
NetworkConfigWiFiSignalQuality	WiFi signal quality	Number	%	100	all
NetworkConfigWiFiType	WiFi connection type	Number		7	all
NetworkConfigWiFiAuthentication	WiFi authentication method	Number		7	all

List of Calculated Fields

Field	Description	Data type	Unit	Example	Where available
Ipv4Address	Ipv4 address	IPv4		192.168.178.40	Splunk data model
NetworkConfigWiFiTypeDisplayName	WiFi type display name	String		IEEE 802.11n	Splunk data model
NetworkConfigWiFiAuthenticationDisplayName	WiFi authentication display name	String		WPA2	Splunk data model

Volume Inventory

Contains inventory metrics for volumes like capacity and filesystem.

Details

• Source type: uberAgent:System:VolumeInventory
• Used in dashboards: Machine Storage
• Enabled through configuration setting: MachineInventory
• Related configuration settings: n/a

List of Fields in the Raw Agent Data

Field	Description	Data type	Unit	Example	Platform
Guid	Volume GUID	String		{d4eadd95-6dce-426e-b55b-521800346789}	all
DeviceName	Device name	String		DeviceHarddiskVolume3	all
Label	Volume label	String		Windows	all
FileSystem	Volume file system	String		NTFS	all
MountPoints	Volume mount points	String		C:	all
DiskNumbers	Disk numbers	String		0	all
FreeMB	Volume free capacity	Number		695395	all
CapacityMB	Volume capacity	Number		975485	all
UsedSpacePercent	Volume used space	Number	%	29	all
PartitionStyle	Volume partition style	String		GPT	all
IsSystemVolume	Indicates if volume is a system volume. Possible values: 0, 1	String		1	Win
IsBootVolume	Indicates if volume is a boot volume. Possible values: 0, 1	String		1	all
IsDirty	Indicates if volume has a dirty bit. If yes, the volume might be corrupted. Possible values: 0, 1	String		0	Win

List of Calculated Fields

Field	Description	Data type	Unit	Example	Where available
IsBootVolumeNumber	Indicates if volume is a boot volume. Possible values: 0, 1	Number		1	Splunk data model
IsDirtyNumber	Indicates if volume has a dirty bit. If yes, the volume might be corrupted. Possible values: 0, 1	Number		0