device object NXQL (classic)
A device is Windows physical or virtual machine monitored by a Nexthink Collector.
Name | Type | Operating systems | Properties | |
---|---|---|---|---|
administrator_account_status | enum | Windows | ||
Determines whether the local Administrator account is enabled or disabled. | ||||
all_antispywares | string | Windows | ||
Summary information about all the detected antispyware:
| ||||
all_antiviruses | string | Windows | ||
Summary information about all the detected antiviruses:
| ||||
all_firewalls | string | Windows | ||
Summary information about all the detected firewalls:
| ||||
allow_non_provisionable_devices | boolean | NU | ||
Indicates whether a device which does not fully support the policy is still allowed to connect to the Exchange Exchange ActiveSync server. If 'yes', the security policy is not guaranteed to be applied, even if the field 'ActiveSync policy application status' value is 'applied in full' | ||||
antispyware_name | string | Windows | NU | |
Name of the main antispyware | ||||
antispyware_rtp | enum | Windows | ||
Indicates whether the antispyware real time protection (RTP) is active:
| ||||
antispyware_up_to_date | enum | Windows | ||
Indicates whether the antispyware is up-to-date:
| ||||
antivirus_name | string | Windows | NU | |
Name of the main antivirus | ||||
antivirus_rtp | enum | Windows | ||
Indicates whether the antivirus real time protection (RTP) is active:
| ||||
antivirus_up_to_date | enum | Windows | ||
Indicates whether the antivirus is up-to-date:
| ||||
audit_account_logon_events | enum | Windows | ||
Determines whether to audit each instance of a user logging on to or logging off from another computer in which this computer is used to validate the account. | ||||
audit_account_management | enum | Windows | ||
Determines whether to audit each event of account management on a computer. | ||||
audit_directory_service_access | enum | Windows | ||
Determines whether to audit the event of a user accessing an Active Directory object that has its own system access control list (SACL) specified. | ||||
audit_logon_events | enum | Windows | ||
Determines whether to audit each instance of a user logging on to or logging off from a computer. | ||||
audit_object_access | enum | Windows | ||
Determines whether to audit the event of a user accessing an object, e.g. a file, folder, registry key, and so forth - that has its own system access control list (SACL) specified. | ||||
audit_policy_change | enum | Windows | ||
Determines whether to audit every incident of a change to user rights assignment policies, audit policies, or trust policies. | ||||
audit_privilege_use | enum | Windows | ||
Determines whether to audit each instance of a user exercising a user right. | ||||
audit_process_tracking | enum | Windows | ||
Determines whether to audit detailed tracking information for events such as program activation, process exit, handle duplication, and indirect object access. | ||||
audit_system_events | enum | Windows | ||
Determines whether to audit when a user restarts or shuts down the computer or when an event occurs that affects either the system security or the security log. | ||||
average_boot_duration | millisecond | Windows | NU | |
Full boot duration baseline | ||||
average_fast_startup_duration | millisecond | Windows | NU | |
Indicated the fast startup boot duration averaged over the fast startups. In the calculation, recent boots weigh more than older boots (exponentially weighted moving average). | ||||
average_logon_duration | millisecond | Windows | NU | |
User logon duration baseline | ||||
bios_serial_number | string | Windows | NU | |
BIOS serial number | ||||
boot_disk_health_status | enum | Windows | NU | |
Indicates the health of the disk from which the device is booting [from], as reported by the operating system. | ||||
boot_disk_type | enum | Windows | macOS | NU | |
Indicates the type of the disk from which the device is booting. | ||||
chassis_serial_number | string | Windows | NU | |
Chassis serial number | ||||
cltr_ca_license_uid | string | Windows | macOS | NU | |
Indicates the Collector assignment license UID | ||||
cltr_ca_status | enum | Windows | macOS | NU | |
Indicates whether Collector assignment service is enabled or disabled | ||||
cltr_crash_guard_count | integer | Windows | NU | |
Indicates the number of consecutive hard resets or system crashes of the device | ||||
cltr_crash_guard_limit | integer | Windows | NU | |
Indicates the Collector CrashGuard limit | ||||
cltr_crash_guard_protection_interval | integer | Windows | NU | |
Indicates the CrashGuard monitoring interval in minutes | ||||
cltr_crash_guard_react_interval | integer | Windows | NU | |
Indicates the Collector CrashGuard reactivation interval in hours | ||||
cltr_custom_shells | enum | Windows | NU | |
Indicates whether the Collector reports user logon events and user interactions in virtualized and embedded (kiosk mode) environments | ||||
cltr_data_channel_protocol | enum | Windows | macOS | NU | |
Specifies if the Collector data is sent over TCP or UDP | ||||
cltr_dns_res_preference | enum | Windows | NU | |
Indicates the DNS resolution preference for Collector in terms of IP protocol version on the device | ||||
cltr_engage_service_status | enum | Windows | macOS | NU | |
Indicates whether Engage is enabled or disabled | ||||
cltr_freezes_monitoring | enum | Windows | NU | |
Indicates whether the Collector is monitoring for unresponsive applications on the device | ||||
cltr_installs_scan_interval | integer | Windows | NU | |
Indicates the interval, in hours, after which the Collector checks for newly installed packages and updates | ||||
cltr_is_visible | enum | Windows | NU | |
Indicates whether Collector is hidden in the "Add or Remove Programs" | ||||
cltr_log_level | enum | Windows | macOS | NU | |
Indicates the Collector log level | ||||
cltr_max_segment_size | integer | Windows | NU | |
Indicates the maximum segment size of packets sent by Collector | ||||
cltr_ra_execution_policy | enum | Windows | NU | |
Indicates the Powershell script execution policy | ||||
cltr_string_tag | string | Windows | macOS | NU | |
Indicates the Collector string tag | ||||
cltr_web_mon_status | enum | Windows | NU | |
Indicates whether Web & Cloud monitoring is enabled or disabled | ||||
collector_distinguished_name | string | Windows | NU | |
Indicates the distinguished name (DN) as seen:
| ||||
collector_installation_log | string | Windows | NU | |
Link to the last Nexthink Collector installation error log | ||||
collector_package_target_version | version | Windows | macOS | NU | |
Indicates the Collector package version that is targeted. | ||||
collector_status | enum | Windows | macOS | NU | |
Indicates the status of the Nexthink Collector package installed on the device:
| ||||
collector_tag | integer | Windows | ||
Collector installation tag | ||||
collector_update_status | enum | Windows | ||
Current status of Nexthink Collector Updater | ||||
collector_version | version | Windows | macOS | ||
Version number of Nexthink Collector installation | ||||
cpu_frequency | mhz | Windows | macOS | NU | |
CPU frequency | ||||
cpu_model | string | Windows | macOS | NU | |
CPU model | ||||
database_usage | permill | Windows | macOS | ||
Percentage of the database used by information related with the device | ||||
device_encryption_required | boolean | NU | ||
Indicates whether device encryption is required. | ||||
device_manufacturer | string | Windows | macOS | NU | |
Indicates the device manufacturer. | ||||
device_model | string | Windows | macOS | NU | |
Indicates the model of the device. | ||||
device_password_required | boolean | NU | ||
Indicates whether a password is required on the device. | ||||
device_product_id | string | Windows | macOS | NU | |
Device product ID | ||||
device_product_version | string | Windows | macOS | NU | |
Device product version | ||||
device_serial_number | string | Windows | macOS | NU | |
Indicates the device serial number. | ||||
device_type | enum | Windows | macOS | ||
Type of device (desktop, laptop, server, mobile) | ||||
device_uid | md5 | Windows | macOS | ||
Indicates the universally unique identifier (based on Engine name and device ID) | ||||
device_uuid | string | Windows | macOS | ||
Indicates the device universally unique identifier (UUID) | ||||
directory_service_site | string | Windows | NU | |
Site (or location) of an Active Directory (AD) service | ||||
disks_manufacturers | string | Windows | ||
Hard disks manufacturers | ||||
disks_smart_index | percent | Windows | NU | |
Lowest S.M.A.R.T. index of installed hard disks (index is based on S.M.A.R.T. attributes) | ||||
distinguished_name | string | Windows | NU | |
Indicates the distinguished name (DN) as seen:
| ||||
eas_access_state | enum | |||
Indicates whether the device can access the Exchange ActiveSync server. The possible states are:
| ||||
eas_access_state_reason | enum | |||
Indicates the reason for the device access state. The possible values are:
| ||||
eas_device_access_rule | string | |||
Indicates the name of the access rule. An access rule allows, blocks or quarantines devices based on the device type, model, OS or user agent characteristics. | ||||
eas_device_identity | string | |||
Indicates the identity of the device in Exchange ActiveSync Server. | ||||
eas_exemption | enum | |||
Indicates whether a personal exemption is set for the device and its user. Possible values are:
| ||||
eas_policy_application_status | enum | |||
Indicates whether the Exchange ActiveSync policy is applied or not. Possible values are:
| ||||
eas_policy_name | string | |||
Indicates the name of the Exchange ActiveSync policy applied to the user's mailbox. | ||||
eas_policy_update | datetime | |||
Indicates the last time the Exchange ActiveSync policy was updated on the device. | ||||
email_attachment_enabled | boolean | NU | ||
Indicates whether attachments can be downloaded to the mobile device through the Exchange ActiveSync protocol. | ||||
enforce_password_history | integer | Windows | NU | |
Indicates the number of unique passwords that have to be associated with a user account before an old password can be reused. | ||||
entity | string | Windows | macOS | ||
Entity | ||||
extended_logon_duration_baseline | millisecond | Windows | NU | |
Extended logon duration baseline | ||||
firewall_name | string | Windows | NU | |
Name of the main firewall | ||||
firewall_rtp | enum | Windows | ||
Indicates whether the firewall real time protection (RTP) is active:
| ||||
first_seen | datetime | Windows | macOS | NU | |
Indicates the first time when the activity of the device was recorded:
| ||||
graphical_card_ram | byte | Windows | NU | |
Amount of RAM of the graphical card with most RAM | ||||
graphical_cards | string | Windows | ||
Installed graphical cards | ||||
group_name | string | Windows | macOS | NU | |
Name of computer domain or workgroup | ||||
guest_account_status | enum | Windows | ||
Determines if the Guest account is enabled or disabled. | ||||
hard_disks | string | Windows | macOS | NC | |
List of all hard disks | ||||
id | identifier | Windows | macOS | ||
Unique device identifier | ||||
internet_security_settings | enum | Windows | ||
Internet security settings (ok, at risk or unknown) | ||||
ip_addresses | ip_address | Windows | macOS | ||
List of IP addresses for the device | ||||
is_collector_distinguished_name_truncated | boolean | Windows | ||
Flag indicating whether the collector DN is truncated or not | ||||
is_directory_service_site_truncated | boolean | Windows | ||
Flag indicating whether the DS site is truncated or not | ||||
last_boot_duration | millisecond | Windows | NU | |
Last boot time duration | ||||
last_extended_logon_duration | millisecond | Windows | NU | |
Last extended logon duration | ||||
last_ip_address | ip_address | Windows | macOS | NU | |
Last IP address assigned to the device | ||||
last_known_connection_status | enum | Windows | macOS | NU | |
Indicates the last known connection status of the device:
| ||||
last_local_ip_address | ip_address | Windows | macOS | NU | |
Last local IP address assigned to the device | ||||
last_logged_on_user | string | Windows | NU | |
Last logged on user | ||||
last_logon_duration | millisecond | Windows | NU | |
Last user logon duration | ||||
last_logon_time | datetime | Windows | NU | |
Last logon time | ||||
last_seen | datetime | Windows | macOS | NU | |
Indicates the last time that activity on the device was reported:
| ||||
last_seen_on_tcp | datetime | Windows | macOS | NU | |
Indicates the last time that the device was successfully connected through the TCP channel.
| ||||
last_system_boot | datetime | Windows | macOS | NU | |
Last boot time | ||||
last_update | datetime | Windows | macOS | NU | |
Indicates the last Collector update time. | ||||
last_update_status | enum | Windows | macOS | NU | |
Indicates the status of the last Collector update:
| ||||
last_updater_request | datetime | Windows | NU | |
Last time Nexthink Updater checked for updates | ||||
last_windows_update | datetime | Windows | NU | |
Time of last system Update | ||||
local_administrators | string | Windows | ||
Users and groups which are members of the Local Administrators group on the device. | ||||
local_power_users | string | Windows | ||
Users and groups which are members of the Local Powers Users group on the device. | ||||
logical_cpu_number | integer | Windows | macOS | NU | |
Indicates the number of cores multiplied by the number of threads that can run on each core through the use of hyperthreading. | ||||
logical_drives | string | Windows | macOS | ||
List of all logical drives | ||||
mac_addresses | mac_address | Windows | macOS | ||
List of MAC addresses for the device | ||||
maximum_password_age | integer | Windows | NU | |
Indicates the period in time (in days) during which the password can be used before the system requires the user to change it:
| ||||
membership_type | enum | Windows | ||
Type of computer membership (domain/workgroup) | ||||
minimum_password_age | integer | Windows | NU | |
Period of time (in days) that a password must be used before the user can change it. | ||||
minimum_password_length | integer | Windows | NU | |
Least number of characters that a password for a user account may contain. | ||||
monitor_models | string | Windows | ||
Models of connected monitors | ||||
monitor_resolutions | string | Windows | ||
Screen resolutions of connected monitors | ||||
monitors | string | Windows | ||
Connected monitors | ||||
monitors_serial_numbers | string | Windows | ||
Serial numbers of connected monitors (ordered as in 'Monitors') | ||||
name | string | Windows | macOS | ||
Indicates the name of the device:
| ||||
number_of_antispyware | enum | Windows | ||
Number of antispyware detected:
| ||||
number_of_antiviruses | enum | Windows | ||
Number of antiviruses detected:
| ||||
number_of_cores | integer | Windows | macOS | NU | |
Number of cores | ||||
number_of_cpus | integer | Windows | macOS | NU | |
Number of CPUs | ||||
number_of_days_since_first_seen | integer | Windows | macOS | NU | |
Number of days since activity of the device was first recorded in the system. | ||||
number_of_days_since_last_boot | integer | Windows | macOS | NU | |
Number of days since last full boot | ||||
number_of_days_since_last_eas_policy_update | integer | NU | ||
Indicates the number of days since the last Exchange ActiveSync policy update. | ||||
number_of_days_since_last_logon | integer | Windows | NU | |
Number of days since last logon | ||||
number_of_days_since_last_seen | integer | Windows | macOS | NU | |
Indicates the number of days since the last time the device was seen by Nexthink. The field is updated whenever device activity is detected:
| ||||
number_of_days_since_last_seen_on_tcp | integer | Windows | NU | |
Indicates the number of days since the last time the device was successfully connected through the TCP channel. '-': The Collector is an older version that does not support TCP. | ||||
number_of_days_since_last_windows_update | integer | Windows | NU | |
Number of days since last system Update | ||||
number_of_firewalls | enum | Windows | ||
Number of firewalls detected:
| ||||
number_of_graphical_cards | integer | Windows | ||
Number of installed graphical cards | ||||
number_of_monitors | integer | Windows | macOS | ||
Number of connected monitors | ||||
os_architecture | enum | Windows | macOS | ||
Architecture of device operating system (x86/x64/ARM64) | ||||
os_build | version | Windows | ||
Indicates the build number of the operating system. | ||||
os_version_and_architecture | string | Windows | macOS | NU | |
Indicates name, version and architecture (when applicable) of the operating system.
| ||||
password_complexity_requirements | enum | Windows | ||
Indicates whether password complexity is required:
| ||||
platform | enum | Windows | macOS | ||
Indicates the platform of the device. A platform is a set of operating system families on which the same objects, activities, events and properties can be retrieved. The possible values are:
| ||||
privileges_of_last_logged_on_users | enum | Windows | ||
Privileges of the last logged on user (user, power user, administrator) | ||||
sd_card_encryption_required | boolean | NU | ||
Indicates whether SD card encryption is required. | ||||
sid | sid | Windows | NU | |
Windows security identifier for the device. | ||||
storage_policy | enum | Windows | macOS | ||
Indicates the event storage policy for the device. Possible values are:
| ||||
system_drive_capacity | byte | Windows | macOS | ||
Total capacity of system drive | ||||
system_drive_free_space | byte | Windows | macOS | ||
Total available free space on system drive | ||||
system_drive_usage | percent | Windows | macOS | NU | |
Use percentage of system drive | ||||
total_active_days | day | Windows | macOS | ||
Total number of days the device was active. | ||||
total_drive_capacity | byte | Windows | macOS | ||
Total capacity of all drives | ||||
total_drive_free_space | byte | Windows | macOS | ||
Total free space on all drives | ||||
total_drive_usage | permill | Windows | macOS | NU | |
Total use percentage of all drives | ||||
total_nonsystem_drive_capacity | byte | Windows | macOS | ||
Total capacity of all non-system drives | ||||
total_nonsystem_drive_free_space | byte | Windows | macOS | ||
Total free space on all non-system drives | ||||
total_nonsystem_drive_usage | percent | Windows | macOS | NU | |
Total use percentage of all non-system drives | ||||
total_ram | byte | Windows | macOS | NU | |
Total amount of RAM | ||||
updater_error | string | Windows | ||
Last Nexthink Collector Updater error | ||||
updater_version | version | Windows | ||
Nexthink Collector Updater version | ||||
upgrade_group | enum | Windows | macOS | NU | |
Indicates the update group of Nexthink Collector:
| ||||
user_account_control_status | enum | Windows | ||
User account control status (ok, at risk or unknown) | ||||
windows_license_key | string | Windows | NU | |
Windows license key | ||||
windows_updates_status | enum | Windows | ||
Windows update status (ok, at risk or unknown) | ||||
wmi_status | enum | Windows | ||
Windows WMI service status (ok, failure) |
Last updated