Used in dashboards: User Logoff Duration, Single Logoff
Enabled through configuration setting: LogonDetail
Related configuration settings: n/a
List of Fields in the Raw Agent Data
Field
Description
Data type
Unit
Measurement type
Example
SessionGUID
Unique identifier that is generated by uberAgent when the session is created.
Valid for this session only.
String
Snapshot
00000002-f295-9109-e7c7-c964011dd401
SessionID
Unique identifier that is generated by the machine when the session is created.
Will be reassigned to other sessions after logoff.
Number
Snapshot
3
User
User name
String
Snapshot
Domain\JohnDoe
GroupPolicyLogoffScriptTimeMs
Group Policy logoff script processing time
Number
ms
Sum
358
Logoff performance
uberAgent collects logoff performance information like disk footprint and process start count.
Details
Source type: uberAgent:Logoff:LogoffPerformance
Used in dashboards: User Logoff Duration, Single Logoff
Enabled through configuration setting: LogonDetail
Related configuration settings: n/a
List of Fields in the Raw Agent Data
Field
Description
Data type
Unit
Measurement type
Example
ProcessStartCount
Number of processes started
Number
Count
8
IOCountRead
Count of read I/O operations
Number
Count
100
IOCountWrite
Count of write I/O operations
Number
Count
100
IOMBRead
Amount of read data volume
Number
MB
Sum
50
IOMBWrite
Amount of write data volume
Number
MB
Sum
50
IOLatencyReadMs
I/O read operation duration divided by count of read I/O operations
Number
ms
Average
358
IOLatencyWriteMs
I/O write operation duration divided by count of write I/O operations
Number
ms
Average
358
Logoff processes
Detailed performance data about all processes active during user logoff like process start time and lifetime duration, commandline, executable path and CPU footprint.
Details
Source type: uberAgent:Process:LogoffProcesses
Used in dashboards: Single Logoff
Enabled through configuration setting: LogonProcesses
Related configuration settings: n/a
List of Fields in the Raw Agent Data
Field
Description
Data type
Unit
Measurement type
Example
ProcName
Process name
String
Snapshot
chrome.exe
ProcID
Process ID
Number
Snapshot
456
ProcParentName
Parent process name
String
Snapshot
PowerShell.exe
ProcParentID
Parent process ID
Number
Snapshot
789
ProcUser
User who ran the process
String
Snapshot
Domain\JohnDoe
AppId
Associated application ID. Used by uberAgent to lookup application names and populate field AppName.
String
Snapshot
GglChrm
AppVersion
Associated application version
String
Snapshot
67.0.3396.99
LogoffProcType
uberAgent groups processes running during logon into types. Possible values: Other, GP logoff script, Session teardown
User Logoff Metrics
In this article
Group Policy Logoff Script Time
uberAgent collects the duration of the Group Policy logoff script.
Details
List of Fields in the Raw Agent Data
Valid for this session only.
Will be reassigned to other sessions after logoff.
Logoff performance
uberAgent collects logoff performance information like disk footprint and process start count.
Details
List of Fields in the Raw Agent Data
Logoff processes
Detailed performance data about all processes active during user logoff like process start time and lifetime duration, commandline, executable path and CPU footprint.
Details
List of Fields in the Raw Agent Data
Valid for this session only.
Will be reassigned to other sessions after logoff.
List of Calculated Fields
Profile Unload Time
uberAgent collects the duration of user profile unloading
Details
List of Fields in the Raw Agent Data
Valid for this session only.
Will be reassigned to other sessions after logoff.
Session Logoff
uberAgent collects information about session logoff like session logoff time.
Details
List of Fields in the Raw Agent Data
Valid for this session only.
Will be reassigned to other sessions after logoff.
Total logoff time
uberAgent collects the total duration of every logoff.
Details
List of Fields in the Raw Agent Data
Valid for this session only.
Will be reassigned to other sessions after logoff.