Peaks in application resource usage (CPU or memory).

Field

Group

Type

Application name

Application

Field

Windows black.png
Mac black.png
Mobile gray disabled.png

Name of application

Binary version

Application

Field

Windows black.png
Mac black.png
Mobile gray disabled.png

Version of binary

Device ID

Device

Field

Windows black.png
Mac black.png
Mobile gray disabled.png

Unique device identifier

Device IP addresses

Device

Field

Windows black.png
Mac black.png
Mobile gray disabled.png

List of IP addresses for the device

Device name

Device

Field

Windows black.png
Mac black.png
Mobile gray disabled.png

Indicates the name of the device:

  • For Windows: NetBios Name

  • For Mac OS: computer name used on the network

  • For Mobile: composed by mailbox name and device friendly name

Device SID

Device

Field

Windows black.png
Mac black.png
Mobile gray disabled.png

Windows security identifier of the device

Duration

Properties

Field

Windows black.png
Mac black.png
Mobile gray disabled.png

Indicates the duration of the event.

NXQL ID:

duration

End time

Properties

Field

Windows black.png
Mac black.png
Mobile gray disabled.png

Performance event end time

NXQL ID:

end_time

Event info

Properties

Field

Windows black.png
Mac black.png
Mobile gray disabled.png

Performance event information

Executable name

Application

Field

Windows black.png
Mac black.png
Mobile gray disabled.png

Name of executable

High memory usage

Warnings

Field

Windows black.png
Mac black.png
Mobile gray disabled.png

High memory usage

High thread CPU usage

Warnings

Field

Windows black.png
Mac black.png
Mobile gray disabled.png

High thread CPU usage

ID

Properties

Field

Windows black.png
Mac black.png
Mobile gray disabled.png

Unique performance event identifier code

NXQL ID:

id

Signature ID

Properties

Field

Windows black.png
Mac black.png
Mobile gray disabled.png

ID of the related execution event signature, i.e. a user executing a certain process on a particular device

NXQL ID:

signature_id

Start time

Properties

Field

Windows black.png
Mac black.png
Mobile gray disabled.png

Performance event start time

NXQL ID:

start_time

User ID

User

Field

Windows black.png
Mac black.png
Mobile gray disabled.png

Unique user identifier code

User name

User

Field

Windows black.png
Mac black.png
Mobile gray disabled.png

Name of user

User SID

User

Field

Windows black.png
Mac black.png
Mobile gray disabled.png

Indicates the Windows security identifier for the user.

  • For Mac 0S: the value is 'S-0-0' if the user is not in Active Directory

Warning duration

Properties

Field

Windows black.png
Mac black.png
Mobile gray disabled.png

Indicates the effective duration of the warning; it can be shorter than the event duration when the high

CPU usage is not continuous.

  • Example: a high CPU usage warning started at 08:00 and lasted until 08:15 (event duration is 15 min). During this 15min, the device was effectively in high CPU usage once during 60s, twice during 120s and once during 30s; the warning duration is therefore 5min 30s.

NXQL ID:

warning_duration