Machine Inventory Metrics
Machine Inventory
Contains inventory metrics for machines like operating system name and hardware manufacturer.
Details
- Source type:
uberAgent:System:MachineInventory - Used in dashboards: Machine Inventory, Single Machine Inventory, Single Application Inventory, Update Inventory
- Enabled through configuration setting:
MachineInventory - Related configuration settings: n/a
List of Fields in the Raw Agent Data
| Field | Description | Data type | Unit | Example | Platform |
|---|---|---|---|---|---|
| OsName | Operating system name. | String | Windows 7 Enterprise | all | |
| OsSpName | Operating system service pack name. | String | Service Pack 1 | Win | |
| OsVersion | Operating system version. | Number | 6.1 | all | |
| OsBuild | Operating system build. | Number | 7601 | Win | |
| OsBuildString | Operating system build. | String | 19D76 | Mac | |
| OsUpdateBuildRevision | Operating system Update Build Revision number. More information. | Number | 165 | Win | |
| OsArchitecture | Operating system architecture. | String | x64 | all | |
| OsSpVersion | Operating system service pack version. | Number | 1.0 | Win | |
| OsType | Operating system type. Possible values: Client, Domain Controller, Server, Terminal Server. |
String | Client | all | |
| OsInstallDate | Operating system installation date. | String | 2018-04-13 | Win | |
| HwManufacturer | Hardware manufacturer. | String | LENOVO | all | |
| HwModel | Hardware model. | String | ThinPad T470s | all | |
| HwBiosVersion | Hardware bios version. | String | N1WET46W (1.25) | Win | |
| AdDomainDns | Active Directory DNS domain name. | String | vastlimits.com | Win | |
| AdDomainNetBios | Active Directory NetBios name. | String | VASTLIMITS | Win | |
| AdSite | Active Directory site. | String | Default-First-Site-Name | Win | |
| AdOu | Active Directory organizational unit. | String | vast limits/Computers/Clients | Win | |
| ComputerNameDn | Computer name Dn formatted. | String | CN=Client1,OU=Clients,OU=Computers,OU=vast limits,DC=vastlimits,DC=com | Win | |
| ComputerNameCanonical | Computer name canonical formatted. | String | vastlimits.com/Computers/Clients/Client1 | Win | |
| CtxFarmName | Citrix farm name. | String | vast limits Farm | Win | |
| CtxMachineCatalogName | Citrix machine catalog name. | String | Machine Catalog 1 | Win | |
| CtxDeliveryGroupName | Citrix delivery group name. | String | Delivery Group 1 | Win | |
| RAMSizeGB | RAM size. | Number | GB | 15.86 | all |
| PowerSupportsConnectedStandby | Indicates if the operating system supports Connected Standby. Possible values: 0, 1. |
String | 0 | Win | |
| PowerSupportsS1 | Indicates if the operating system supports sleep state S1. Possible values: 0, 1. |
String | 0 | Win | |
| PowerSupportsS2 | Indicates if the operating system supports sleep state S2. Possible values: 0, 1. |
String | 0 | Win | |
| PowerSupportsS3 | Indicates if the operating system supports sleep state S3. Possible values: 0, 1. |
String | 0 | Win | |
| PowerSupportsS4 | Indicates if the operating system supports sleep state S4. Possible values: 0, 1. |
String | 1 | Win | |
| PowerSupportsS5 | Indicates if the operating system supports sleep state S5. Possible values: 0, 1. |
String | 1 | Win | |
| IsUpsPresent | Indicates if there is an uninterruptible power supply (UPS) present. Possible values: 0, 1. |
String | 0 | all | |
| IsBatteryPresent | Indicates if there is a battery present. Possible values: 0, 1. |
String | 1 | all | |
| BatteryWearLevelPercent | Percent of battery capacity gone. The accuracy strongly depends on the built-in hardware. | Number | % | 7.8 | all |
| CPUName | CPU name. | String | Intel(R) Core(TM) i7-7500U CPU @ 2.70GHz | all | |
| CPUSockets | CPU sockets. | Number | 1 | Win | |
| CPUCoresPhysical | CPU physical cores. | Number | 2 | all | |
| CPUCoresLogical | CPU logical cores. | Number | 4 | all | |
| CPUMaxMhz | CPU base frequency. | Number | MHz | 2904 | all |
| HwHypervisorVendor | Detected hypervisor technology for this system. | String | Microsoft Hv | Win, Mac (Intel) | |
| HwIsVirtualMachine | Indicates if machine is a virtual machine. Possible values: 0 ,1. | String | 0 | all | |
| BIOSSerial | BIOS serial number. | String | YM5S012345 | Win | |
| BaseboardSerial | Baseboard serial number. | String | 50123445 | Win | |
| IsSipEnabled | Status of the System Integrity Protection. | String | 1 | Mac |
List of Calculated Fields
| Field | Description | Data type | Unit | Example | Where available |
|---|---|---|---|---|---|
| OsBuildUbr | Operating system build and Update Build Revision combined. For operating systems lower than Windows 10 it is just the content of OsBuild. |
Number | 17134.165 | Splunk data model | |
| HwManufacturerModel | Hardware manufacturer and model combined. | String | LENOVO ThinkPad T470s | Splunk data model |
Disk Inventory
Contains inventory metrics for physical disks like disk name and capacity.
Details
- Source type:
uberAgent:System:DiskInventory - Used in dashboards: Machine Storage
- Enabled through configuration setting:
MachineInventory - Related configuration settings: n/a
List of Fields in the Raw Agent Data
| Field | Description | Data type | Unit | Example | Platform |
|---|---|---|---|---|---|
| Name | Disk name. | String | SAMSUNG MZVLW1T0HMLH-000L7 | all | |
| Enumerator | Disk enumerator (e.g., IDE, SCSI, USBSTOR). |
String | SCSI | all | |
| DiskNumber | Disk number. | Number | 0 | all | |
| CapacityMB | Disk capacity. | Number | MB | 976762 | all |
| IsWritable | Indicates if the disk is writable. Possible values: 0, 1. |
String | 1 | all | |
| IsRemovable | Indicates if the disk is removable. Possible values: 0, 1. |
String | 0 | all |
Monitor Inventory
Contains inventory metrics for monitors like resolution and color depth.
Details
- Source type:
uberAgent:System:MonitorInventory - Used in dashboards: Machine Inventory, Single Machine Inventory
- Enabled through configuration setting:
MachineInventory - Related configuration settings: n/a
- The fields “MonitorColorDepth” and “MonitorDisplayName” contain generic values for ARM-based systems under macOS.
List of Fields in the Raw Agent Data
| Field | Description | Data type | Unit | Example | Platform |
|---|---|---|---|---|---|
| MonitorIndex | Monitor index. | Number | 1 | all | |
| MonitorHRes | Monitor horizontal resolution. | Number | 3440 | all | |
| MonitorVRes | Monitor vertical resolution. | Number | 1440 | all | |
| MonitorColorDepth | Monitor color depth. | Number | 32 | all | |
| MonitorIsPrimary | Indicates if a monitor is the primary one. Possible values: 0, 1. |
String | 1 | all | |
| MonitorDisplayName | Monitor name. | String | Generic PnP Monitor | all |
Network Configuration Information
Contains inventory metrics for network connections like interface type and SSIDs.
Details
- Source type:
uberAgent:System:NetworkConfigInformation - Used in dashboards: Machine Inventory, Single Machine Inventory, Machine Network Configuration
- Enabled through configuration setting:
NetworkConfigInformation - Related configuration settings: n/a
List of Fields in the Raw Agent Data
| Field | Description | Data type | Unit | Example | Platform |
|---|---|---|---|---|---|
| NetworkConfigFriendlyName | Network friendly name. | String | WiFi | all | |
| NetworkConfigDescription | Network description. | String | Intel(R) Dual Band Wireless-AC 8265 | all | |
| NetworkConfigInterfaceType | Network interface type ID. Possible values: 0, 6, 23, 63, 71, 243. |
Number | 71 | all | |
| NetworkConfigInterfaceTypeDisplayName | Network interface type name. Possible values: Other, Ethernet, VPN, ISDN, WiFi, WWAN. |
String | WiFi | all | |
| NetworkConfigDnsSuffix | Network DNS suffix. | String | fritz.box | all | |
| NetworkConfigSsid | Network SSID. | String | HomeWiFi | all | |
| NetworkConfigIsConnectedToInternet | Indicates if the network is connected to the Internet. Possible values: 0, 1. |
String | 1 | all | |
| NetworkConfigIPv4 | Ipv4 address. | IPv4 | 192.168.178.40 | all | |
| NetworkConfigIPv6 | Ipv6 address. | String | 2001:0db8:85a3:0000:0000:8a2e:0370:7334 | all | |
| NetworkConfigMACAddress | MAC address. | String | AC-ED-5C-02-F0-30 | all | |
| NetworkConfigWiFiSignalQuality | WiFi signal quality. | Number | % | 100 | all |
| NetworkConfigWiFiType | WiFi connection type. | Number | 7 | all | |
| NetworkConfigWiFiAuthentication | WiFi authentication method. | Number | 7 | all |
List of Calculated Fields
| Field | Description | Data type | Unit | Example | Where available |
|---|---|---|---|---|---|
| Ipv4Address | Ipv4 address. | IPv4 | 192.168.178.40 | Splunk data model | |
| NetworkConfigWiFiTypeDisplayName | WiFi type display name. | String | IEEE 802.11n | Splunk data model | |
| NetworkConfigWiFiAuthenticationDisplayName | WiFi authentication display name. | String | WPA2 | Splunk data model |
Volume Inventory
Contains inventory metrics for volumes like capacity and filesystem.
Details
- Source type:
uberAgent:System:VolumeInventory - Used in dashboards: Machine Storage
- Enabled through configuration setting:
MachineInventory - Related configuration settings: n/a
List of Fields in the Raw Agent Data
| Field | Description | Data type | Unit | Example | Platform |
|---|---|---|---|---|---|
| Guid | Volume GUID. | String | {d4eadd95-6dce-426e-b55b-521800346789} | all | |
| DeviceName | Device name. | String | DeviceHarddiskVolume3 | all | |
| Label | Volume label. | String | Windows | all | |
| FileSystem | Volume file system. | String | NTFS | all | |
| MountPoints | Volume mount points. | String | C: | all | |
| DiskNumbers | Disk numbers. | String | 0 | all | |
| FreeMB | Volume free capacity. | Number | 695395 | all | |
| CapacityMB | Volume capacity. | Number | 975485 | all | |
| UsedSpacePercent | Volume used space. | Number | % | 29 | all |
| PartitionStyle | Volume partition style. | String | GPT | all | |
| IsSystemVolume | Indicates if volume is a system volume. Possible values: 0, 1. |
String | 1 | Win | |
| IsBootVolume | Indicates if volume is a boot volume. Possible values: 0, 1. |
String | 1 | all | |
| IsDirty | Indicates if volume has a dirty bit. If yes, the volume might be corrupted. Possible values: 0, 1. |
String | 0 | Win |
List of Calculated Fields
| Field | Description | Data type | Unit | Example | Where available |
|---|---|---|---|---|---|
| IsBootVolumeNumber | Indicates if volume is a boot volume. Possible values: 0, 1. |
Number | 1 | Splunk data model | |
| IsDirtyNumber | Indicates if volume has a dirty bit. If yes, the volume might be corrupted. Possible values: 0, 1. |
Number | 0 |