device object NXQL (classic)

A device is Windows physical or virtual machine monitored by a Nexthink Collector.

Name

Type

Operating systems

Properties

administrator_account_status

enum

Windows

Determines whether the local Administrator account is enabled or disabled.

all_antispywares

string

Windows

Summary information about all the detected antispyware:

unknown: Indicates that the information could not be retrieved;
N/A: This field is not available on this operating system;
'-': No data, incompatible collector version or the data is not yet available.

all_antiviruses

string

Windows

Summary information about all the detected antiviruses:

unknown: Indicates that the information could not be retrieved;
N/A: This field is not available on this operating system;
'-': No data, incompatible collector version or the data is not yet available.

all_firewalls

string

Windows

Summary information about all the detected firewalls:

unknown: Indicates that the information could not be retrieved;
N/A: This field is not available on this operating system;
'-': No data, incompatible collector version or the data is not yet available.

allow_non_provisionable_devices

boolean

Indicates whether a device which does not fully support the policy is still allowed to connect to the Exchange Exchange ActiveSync server. If 'yes', the security policy is not guaranteed to be applied, even if the field 'ActiveSync policy application status' value is 'applied in full'

antispyware_name

string

Windows

Name of the main antispyware

antispyware_rtp

enum

Windows

Indicates whether the antispyware real time protection (RTP) is active:

on: Indicates that RTP is active;
off: Indicates that either RTP is not active or no antispyware has been detected;
unknown: Indicates that the information could not be retrieved;
N/A: This field is not available on this operating system;
'-': No data, incompatible collector version or the data is not yet available.

antispyware_up_to_date

enum

Windows

Indicates whether the antispyware is up-to-date:

yes: Indicates that antispyware is up-to-date;
no: Indicates that either the antispyware is not up-to-date or no antispyware has been detected;
unknown: Indicates that the information could not be retrieved;
N/A: This field is not available on this operating system;
'-': No data, incompatible collector version or the data is not yet available.

antivirus_name

string

Windows

Name of the main antivirus

antivirus_rtp

enum

Windows

Indicates whether the antivirus real time protection (RTP) is active:

on: Indicates that RTP is active;
off: Indicates that either RTP is not active or no antivirus has been detected;
unknown: Indicates that the information could not be retrieved;
N/A: This field is not available on this operating system;
'-': No data, incompatible collector version or the data is not yet available.

antivirus_up_to_date

enum

Windows

Indicates whether the antivirus is up-to-date:

yes: Indicates that antivirus is up-to-date;
no: Indicates that either the antivirus is not up-to-date or no antivirus has been detected;
unknown: Indicates that the information could not be retrieved;
N/A: This field is not available on this operating system;
'-': No data, incompatible collector version or the data is not yet available.

audit_account_logon_events

enum

Windows

Determines whether to audit each instance of a user logging on to or logging off from another computer in which this computer is used to validate the account.

audit_account_management

enum

Windows

Determines whether to audit each event of account management on a computer.

audit_directory_service_access

enum

Windows

Determines whether to audit the event of a user accessing an Active Directory object that has its own system access control list (SACL) specified.

audit_logon_events

enum

Windows

Determines whether to audit each instance of a user logging on to or logging off from a computer.

audit_object_access

enum

Windows

Determines whether to audit the event of a user accessing an object, e.g. a file, folder, registry key, and so forth - that has its own system access control list (SACL) specified.

audit_policy_change

enum

Windows

Determines whether to audit every incident of a change to user rights assignment policies, audit policies, or trust policies.

audit_privilege_use

enum

Windows

Determines whether to audit each instance of a user exercising a user right.

audit_process_tracking

enum

Windows

Determines whether to audit detailed tracking information for events such as program activation, process exit, handle duplication, and indirect object access.

audit_system_events

enum

Windows

Determines whether to audit when a user restarts or shuts down the computer or when an event occurs that affects either the system security or the security log.

average_boot_duration

millisecond

Windows

Full boot duration baseline

average_fast_startup_duration

millisecond

Windows

Indicated the fast startup boot duration averaged over the fast startups. In the calculation, recent boots weigh more than older boots (exponentially weighted moving average).

average_logon_duration

millisecond

Windows

User logon duration baseline

bios_serial_number

string

Windows

BIOS serial number

boot_disk_health_status

enum

Windows

Indicates the health of the disk from which the device is booting [from], as reported by the operating system.

boot_disk_type

enum

Windows | macOS

Indicates the type of the disk from which the device is booting.

chassis_serial_number

string

Windows

Chassis serial number

cltr_ca_license_uid

string

Windows | macOS

Indicates the Collector assignment license UID

cltr_ca_status

enum

Windows | macOS

Indicates whether Collector assignment service is enabled or disabled

cltr_crash_guard_count

integer

Windows

Indicates the number of consecutive hard resets or system crashes of the device

cltr_crash_guard_limit

integer

Windows

Indicates the Collector CrashGuard limit

cltr_crash_guard_protection_interval

integer

Windows

Indicates the CrashGuard monitoring interval in minutes

cltr_crash_guard_react_interval

integer

Windows

Indicates the Collector CrashGuard reactivation interval in hours

cltr_custom_shells

enum

Windows

Indicates whether the Collector reports user logon events and user interactions in virtualized and embedded (kiosk mode) environments

cltr_data_channel_protocol

enum

Windows | macOS

Specifies if the Collector data is sent over TCP or UDP

cltr_dns_res_preference

enum

Windows

Indicates the DNS resolution preference for Collector in terms of IP protocol version on the device

cltr_engage_service_status

enum

Windows | macOS

Indicates whether Engage is enabled or disabled

cltr_freezes_monitoring

enum

Windows

Indicates whether the Collector is monitoring for unresponsive applications on the device

cltr_installs_scan_interval

integer

Windows

Indicates the interval, in hours, after which the Collector checks for newly installed packages and updates

cltr_is_visible

enum

Windows

Indicates whether Collector is hidden in the "Add or Remove Programs"

cltr_log_level

enum

Windows | macOS

Indicates the Collector log level

cltr_max_segment_size

integer

Windows

Indicates the maximum segment size of packets sent by Collector

cltr_ra_execution_policy

enum

Windows

Indicates the Powershell script execution policy

cltr_string_tag

string

Windows | macOS

Indicates the Collector string tag

cltr_web_mon_status

enum

Windows

Indicates whether Web & Cloud monitoring is enabled or disabled

collector_distinguished_name

string

Windows

Indicates the distinguished name (DN) as seen:

For Windows: In Active Directory (AD). if no connection with AD is set up, a '-' is displayed;
For Mobile: In the Exchange ActiveSync server Note that this DN is reported by the Collector.

collector_installation_log

string

Windows

Link to the last Nexthink Collector installation error log

collector_package_target_version

version

Windows | macOS

Indicates the Collector package version that is targeted.

collector_status

enum

Windows | macOS

Indicates the status of the Nexthink Collector package installed on the device:

unmanaged: the Collector is not automatically updated
up-to-date: the Collector is up-to-date
outdated: a newer Collector version is available.

collector_tag

integer

Windows

Collector installation tag

collector_update_status

enum

Windows

Current status of Nexthink Collector Updater

collector_version

version

Windows | macOS

Version number of Nexthink Collector installation

cpu_frequency

mhz

Windows | macOS

CPU frequency

cpu_model

string

Windows | macOS

CPU model

database_usage

permill

Windows | macOS

Percentage of the database used by information related with the device

device_encryption_required

boolean

Indicates whether device encryption is required.

device_manufacturer

string

Windows | macOS

Indicates the device manufacturer.

device_model

string

Windows | macOS

Indicates the model of the device.

device_password_required

boolean

Indicates whether a password is required on the device.

device_product_id

string

Windows | macOS

Device product ID

device_product_version

string

Windows | macOS

Device product version

device_serial_number

string

Windows | macOS

Indicates the device serial number.

device_type

enum

Windows | macOS

Type of device (desktop, laptop, server, mobile)

device_uid

md5

Windows | macOS

Indicates the universally unique identifier (based on Engine name and device ID)

device_uuid

string

Windows | macOS

Indicates the device universally unique identifier (UUID)

directory_service_site

string

Windows

Site (or location) of an Active Directory (AD) service

disks_manufacturers

string

Windows

Hard disks manufacturers

disks_smart_index

percent

Windows

Lowest S.M.A.R.T. index of installed hard disks (index is based on S.M.A.R.T. attributes)

distinguished_name

string

Windows

Indicates the distinguished name (DN) as seen:

For Windows: In Active Directory (AD). if no connection with AD is set up, a '-' is displayed;
For Mobile: In the Exchange ActiveSync server

eas_access_state

enum

Indicates whether the device can access the Exchange ActiveSync server. The possible states are:

allowed: the device has access;
blocked: the device is blocked;
discovery: the device is temporary quarantined while it is being identified by the Exchange ActiveSync server;
quarantined: the device is waiting for Exchange ActiveSync administrator approval.

eas_access_state_reason

enum

Indicates the reason for the device access state. The possible values are:

global: caused by the global access settings;
device rule: caused by a device access rule;
individual: caused by an individual exemption;
policy: caused by Exchange ActiveSync policy.

eas_device_access_rule

string

Indicates the name of the access rule. An access rule allows, blocks or quarantines devices based on the device type, model, OS or user agent characteristics.

eas_device_identity

string

Indicates the identity of the device in Exchange ActiveSync Server.

eas_exemption

enum

Indicates whether a personal exemption is set for the device and its user. Possible values are:

none;
allow;
block.

eas_policy_application_status

enum

Indicates whether the Exchange ActiveSync policy is applied or not. Possible values are:

not applied;
applied in full: the policy is applied (unless the field 'Allow non provisionable devices' value is 'yes');
partially applied.

eas_policy_name

string

Indicates the name of the Exchange ActiveSync policy applied to the user's mailbox.

eas_policy_update

datetime

Indicates the last time the Exchange ActiveSync policy was updated on the device.

email_attachment_enabled

boolean

Indicates whether attachments can be downloaded to the mobile device through the Exchange ActiveSync protocol.

enforce_password_history

integer

Windows

Indicates the number of unique passwords that have to be associated with a user account before an old password can be reused.

entity

string

Windows | macOS

Entity

extended_logon_duration_baseline

millisecond

Windows

Extended logon duration baseline

firewall_name

string

Windows

Name of the main firewall

firewall_rtp

enum

Windows

Indicates whether the firewall real time protection (RTP) is active:

on: Indicates that RTP is active;
off: Indicates that either RTP is not active or no firewall has been detected;
unknown: Indicates that the information could not be retrieved;
N/A: This field is not available on this operating system;
'-': No data, incompatible collector version or the data is not yet available.

first_seen

datetime

Windows | macOS

Indicates the first time when the activity of the device was recorded:

For Windows and Mac OS: The first time Collector reported activity;
For Mobile: The first time the device was reported with a successful synchronization.

graphical_card_ram

byte

Windows

Amount of RAM of the graphical card with most RAM

graphical_cards

string

Windows

Installed graphical cards

group_name

string

Windows | macOS

Name of computer domain or workgroup

guest_account_status

enum

Windows

Determines if the Guest account is enabled or disabled.

hard_disks

string

Windows | macOS

List of all hard disks

identifier

Windows | macOS

Unique device identifier

internet_security_settings

enum

Windows

Internet security settings (ok, at risk or unknown)

ip_addresses

ip_address

Windows | macOS

List of IP addresses for the device

is_collector_distinguished_name_truncated

boolean

Windows

Flag indicating whether the collector DN is truncated or not

is_directory_service_site_truncated

boolean

Windows

Flag indicating whether the DS site is truncated or not

last_boot_duration

millisecond

Windows

Last boot time duration

last_extended_logon_duration

millisecond

Windows

Last extended logon duration

last_ip_address

ip_address

Windows | macOS

Last IP address assigned to the device

last_known_connection_status

enum

Windows | macOS

Indicates the last known connection status of the device:

udp: the device successfully connected via UDP but not TCP.
tcp: the device successfully connected via TCP but not UDP.
udp_tcp: the device successfully connected via both UDP and TCP.
'-': Collector version is below V6.6.

last_local_ip_address

ip_address

Windows | macOS

Last local IP address assigned to the device

last_logged_on_user

string

Windows

Last logged on user

last_logon_duration

millisecond

Windows

Last user logon duration

last_logon_time

datetime

Windows

Last logon time

last_seen

datetime

Windows | macOS

Indicates the last time that activity on the device was reported:

For Windows and Mac OS: The last time Collector reported activity through the UDP channel,
For Mobile: The last time the device successfully synchronized with the Mobile Bridge.

last_seen_on_tcp

datetime

Windows | macOS

Indicates the last time that the device was successfully connected through the TCP channel.

'-': The Collector is an older version that does not support TCP.

last_system_boot

datetime

Windows | macOS

Last boot time

last_update

datetime

Windows | macOS

Indicates the last Collector update time.

last_update_status

enum

Windows | macOS

Indicates the status of the last Collector update:

'-': the Collector was never updated
successful installation: the last Collector installation was successful
package download error: the Collector was not able to download the Collector package from Nexthink Appliance
package digital signature error: the Collector was not able to check the Collector package digital signature
device reboot required: the device needs to be rebooted to complete the Collector installation
package error: the Collector package installation has failed
internal error: the Collector package installation has failed for an unexpected reason.

last_updater_request

datetime

Windows

Last time Nexthink Updater checked for updates

last_windows_update

datetime

Windows

Time of last system Update

local_administrators

string

Windows

Users and groups which are members of the Local Administrators group on the device.

local_power_users

string

Windows

Users and groups which are members of the Local Powers Users group on the device.

logical_cpu_number

integer

Windows | macOS

Indicates the number of cores multiplied by the number of threads that can run on each core through the use of hyperthreading.

logical_drives

string

Windows | macOS

List of all logical drives

mac_addresses

mac_address

Windows | macOS

List of MAC addresses for the device

maximum_password_age

integer

Windows

Indicates the period in time (in days) during which the password can be used before the system requires the user to change it:

Windows: As set up in the group policy;
Mobile: As set up in security policies.

membership_type

enum

Windows

Type of computer membership (domain/workgroup)

minimum_password_age

integer

Windows

Period of time (in days) that a password must be used before the user can change it.

minimum_password_length

integer

Windows

Least number of characters that a password for a user account may contain.

monitor_models

string

Windows

Models of connected monitors

monitor_resolutions

string

Windows

Screen resolutions of connected monitors

monitors

string

Windows

Connected monitors

monitors_serial_numbers

string

Windows

Serial numbers of connected monitors (ordered as in 'Monitors')

name

string

Windows | macOS

Indicates the name of the device:

For Windows: NetBios Name;
For Mac OS: Computer name used on the network;
For Mobile: Composed by mailbox name and device friendly name.

number_of_antispyware

enum

Windows

Number of antispyware detected:

unknown: Indicates that the information could not be retrieved;
N/A: This field is not available on this operating system;
'-': No data, incompatible collector version or the data is not yet available.

number_of_antiviruses

enum

Windows

Number of antiviruses detected:

unknown: Indicates that the information could not be retrieved;
N/A: This field is not available on this operating system;
'-': No data, incompatible collector version or the data is not yet available.

number_of_cores

integer

Windows | macOS

Number of cores

number_of_cpus

integer

Windows | macOS

Number of CPUs

number_of_days_since_first_seen

integer

Windows | macOS

Number of days since activity of the device was first recorded in the system.

number_of_days_since_last_boot

integer

Windows | macOS

Number of days since last full boot

number_of_days_since_last_eas_policy_update

integer

Indicates the number of days since the last Exchange ActiveSync policy update.

number_of_days_since_last_logon

integer

Windows

Number of days since last logon

number_of_days_since_last_seen

integer

Windows | macOS

Indicates the number of days since the last time the device was seen by Nexthink. The field is updated whenever device activity is detected:

For Windows and Mac OS: seen through the UDP channel,
For Mobile: seen through the Mobile Bridge.

number_of_days_since_last_seen_on_tcp

integer

Windows

Indicates the number of days since the last time the device was successfully connected through the TCP channel. '-': The Collector is an older version that does not support TCP.

number_of_days_since_last_windows_update

integer

Windows

Number of days since last system Update

number_of_firewalls

enum

Windows

Number of firewalls detected:

unknown: Indicates that the information could not be retrieved;
N/A: This field is not available on this operating system;
'-': No data, incompatible collector version or the data is not yet available.

number_of_graphical_cards

integer

Windows

Number of installed graphical cards

number_of_monitors

integer

Windows | macOS

Number of connected monitors

os_architecture

enum

Windows | macOS

Architecture of device operating system (x86/x64/ARM64)

os_build

version

Windows

Indicates the build number of the operating system.

os_version_and_architecture

string

Windows | macOS

Indicates name, version and architecture (when applicable) of the operating system.

unknown: the OS version could not be retrieved or it could not be mapped to a recognized value.

password_complexity_requirements

enum

Windows

Indicates whether password complexity is required:

Windows: The password must meet complexity requirements as defined in the group policy;
Mobile: No simple passwords are allowed or a minimum password length is set, as defined in the security policy.

platform

enum

Windows | macOS

Indicates the platform of the device. A platform is a set of operating system families on which the same objects, activities, events and properties can be retrieved. The possible values are:

Windows;
Mac OS;
Mobile.

privileges_of_last_logged_on_users

enum

Windows

Privileges of the last logged on user (user, power user, administrator)

sd_card_encryption_required

boolean

Indicates whether SD card encryption is required.

sid

Windows

Windows security identifier for the device.

storage_policy

enum

Windows | macOS

Indicates the event storage policy for the device. Possible values are:

all: web requests, connections and executions are stored
connections and executions;
executions;
none: no activity is recorded;
remove: The device will be removed from Engine during the next cleanup, as long as it is no longer sending data; Note that available events depend on the device platform.

system_drive_capacity

byte

Windows | macOS

Total capacity of system drive

system_drive_free_space

byte

Windows | macOS

Total available free space on system drive

system_drive_usage

percent

Windows | macOS

Use percentage of system drive

total_active_days

day

Windows | macOS

Total number of days the device was active.

total_drive_capacity

byte

Windows | macOS

Total capacity of all drives

total_drive_free_space

byte

Windows | macOS

Total free space on all drives

total_drive_usage

permill

Windows | macOS

Total use percentage of all drives

total_nonsystem_drive_capacity

byte

Windows | macOS

Total capacity of all non-system drives

total_nonsystem_drive_free_space

byte

Windows | macOS

Total free space on all non-system drives

total_nonsystem_drive_usage

percent

Windows | macOS

Total use percentage of all non-system drives

total_ram

byte

Windows | macOS

Total amount of RAM

updater_error

string

Windows

Last Nexthink Collector Updater error

updater_version

version

Windows

Nexthink Collector Updater version

upgrade_group

enum

Windows | macOS

Indicates the update group of Nexthink Collector:

manual: the Collector is manually updated
pilot: the Collector is updated as part of the pilot group
main: the Collector is updated as part of the main group.

user_account_control_status

enum

Windows

User account control status (ok, at risk or unknown)

windows_license_key

string

Windows

Windows license key

windows_updates_status

enum

Windows

Windows update status (ok, at risk or unknown)

wmi_status

enum

Windows

Windows WMI service status (ok, failure)

Last updated 9 months ago

Was this helpful?