device object NXQL (classic)

A device is Windows physical or virtual machine monitored by a Nexthink Collector.

Name	Type	Operating systems	Properties
administrator_account_status	enum	Windows
	Determines whether the local Administrator account is enabled or disabled.
all_antispywares	string	Windows
	Summary information about all the detected antispyware: unknown: Indicates that the information could not be retrieved; N/A: This field is not available on this operating system; '-': No data, incompatible collector version or the data is not yet available.
all_antiviruses	string	Windows
	Summary information about all the detected antiviruses: unknown: Indicates that the information could not be retrieved; N/A: This field is not available on this operating system; '-': No data, incompatible collector version or the data is not yet available.
all_firewalls	string	Windows
	Summary information about all the detected firewalls: unknown: Indicates that the information could not be retrieved; N/A: This field is not available on this operating system; '-': No data, incompatible collector version or the data is not yet available.
allow_non_provisionable_devices	boolean			NU
	Indicates whether a device which does not fully support the policy is still allowed to connect to the Exchange Exchange ActiveSync server. If 'yes', the security policy is not guaranteed to be applied, even if the field 'ActiveSync policy application status' value is 'applied in full'
antispyware_name	string	Windows		NU
	Name of the main antispyware
antispyware_rtp	enum	Windows
	Indicates whether the antispyware real time protection (RTP) is active: on: Indicates that RTP is active; off: Indicates that either RTP is not active or no antispyware has been detected; unknown: Indicates that the information could not be retrieved; N/A: This field is not available on this operating system; '-': No data, incompatible collector version or the data is not yet available.
antispyware_up_to_date	enum	Windows
	Indicates whether the antispyware is up-to-date: yes: Indicates that antispyware is up-to-date; no: Indicates that either the antispyware is not up-to-date or no antispyware has been detected; unknown: Indicates that the information could not be retrieved; N/A: This field is not available on this operating system; '-': No data, incompatible collector version or the data is not yet available.
antivirus_name	string	Windows		NU
	Name of the main antivirus
antivirus_rtp	enum	Windows
	Indicates whether the antivirus real time protection (RTP) is active: on: Indicates that RTP is active; off: Indicates that either RTP is not active or no antivirus has been detected; unknown: Indicates that the information could not be retrieved; N/A: This field is not available on this operating system; '-': No data, incompatible collector version or the data is not yet available.
antivirus_up_to_date	enum	Windows
	Indicates whether the antivirus is up-to-date: yes: Indicates that antivirus is up-to-date; no: Indicates that either the antivirus is not up-to-date or no antivirus has been detected; unknown: Indicates that the information could not be retrieved; N/A: This field is not available on this operating system; '-': No data, incompatible collector version or the data is not yet available.
audit_account_logon_events	enum	Windows
	Determines whether to audit each instance of a user logging on to or logging off from another computer in which this computer is used to validate the account.
audit_account_management	enum	Windows
	Determines whether to audit each event of account management on a computer.
audit_directory_service_access	enum	Windows
	Determines whether to audit the event of a user accessing an Active Directory object that has its own system access control list (SACL) specified.
audit_logon_events	enum	Windows
	Determines whether to audit each instance of a user logging on to or logging off from a computer.
audit_object_access	enum	Windows
	Determines whether to audit the event of a user accessing an object, e.g. a file, folder, registry key, and so forth - that has its own system access control list (SACL) specified.
audit_policy_change	enum	Windows
	Determines whether to audit every incident of a change to user rights assignment policies, audit policies, or trust policies.
audit_privilege_use	enum	Windows
	Determines whether to audit each instance of a user exercising a user right.
audit_process_tracking	enum	Windows
	Determines whether to audit detailed tracking information for events such as program activation, process exit, handle duplication, and indirect object access.
audit_system_events	enum	Windows
	Determines whether to audit when a user restarts or shuts down the computer or when an event occurs that affects either the system security or the security log.
average_boot_duration	millisecond	Windows		NU
	Full boot duration baseline
average_fast_startup_duration	millisecond	Windows		NU
	Indicated the fast startup boot duration averaged over the fast startups. In the calculation, recent boots weigh more than older boots (exponentially weighted moving average).
average_logon_duration	millisecond	Windows		NU
	User logon duration baseline
bios_serial_number	string	Windows		NU
	BIOS serial number
boot_disk_health_status	enum	Windows		NU
	Indicates the health of the disk from which the device is booting [from], as reported by the operating system.
boot_disk_type	enum	Windows | macOS		NU
	Indicates the type of the disk from which the device is booting.
chassis_serial_number	string	Windows		NU
	Chassis serial number
cltr_ca_license_uid	string	Windows | macOS		NU
	Indicates the Collector assignment license UID
cltr_ca_status	enum	Windows | macOS		NU
	Indicates whether Collector assignment service is enabled or disabled
cltr_crash_guard_count	integer	Windows		NU
	Indicates the number of consecutive hard resets or system crashes of the device
cltr_crash_guard_limit	integer	Windows		NU
	Indicates the Collector CrashGuard limit
cltr_crash_guard_protection_interval	integer	Windows		NU
	Indicates the CrashGuard monitoring interval in minutes
cltr_crash_guard_react_interval	integer	Windows		NU
	Indicates the Collector CrashGuard reactivation interval in hours
cltr_custom_shells	enum	Windows		NU
	Indicates whether the Collector reports user logon events and user interactions in virtualized and embedded (kiosk mode) environments
cltr_data_channel_protocol	enum	Windows | macOS		NU
	Specifies if the Collector data is sent over TCP or UDP
cltr_dns_res_preference	enum	Windows		NU
	Indicates the DNS resolution preference for Collector in terms of IP protocol version on the device
cltr_engage_service_status	enum	Windows | macOS		NU
	Indicates whether Engage is enabled or disabled
cltr_freezes_monitoring	enum	Windows		NU
	Indicates whether the Collector is monitoring for unresponsive applications on the device
cltr_installs_scan_interval	integer	Windows		NU
	Indicates the interval, in hours, after which the Collector checks for newly installed packages and updates
cltr_is_visible	enum	Windows		NU
	Indicates whether Collector is hidden in the "Add or Remove Programs"
cltr_log_level	enum	Windows | macOS		NU
	Indicates the Collector log level
cltr_max_segment_size	integer	Windows		NU
	Indicates the maximum segment size of packets sent by Collector
cltr_ra_execution_policy	enum	Windows		NU
	Indicates the Powershell script execution policy
cltr_string_tag	string	Windows | macOS		NU
	Indicates the Collector string tag
cltr_web_mon_status	enum	Windows		NU
	Indicates whether Web & Cloud monitoring is enabled or disabled
collector_distinguished_name	string	Windows		NU
	Indicates the distinguished name (DN) as seen: For Windows: In Active Directory (AD). if no connection with AD is set up, a '-' is displayed; For Mobile: In the Exchange ActiveSync server Note that this DN is reported by the Collector.
collector_installation_log	string	Windows		NU
	Link to the last Nexthink Collector installation error log
collector_package_target_version	version	Windows | macOS		NU
	Indicates the Collector package version that is targeted.
collector_status	enum	Windows | macOS		NU
	Indicates the status of the Nexthink Collector package installed on the device: unmanaged: the Collector is not automatically updated up-to-date: the Collector is up-to-date outdated: a newer Collector version is available.
collector_tag	integer	Windows
	Collector installation tag
collector_update_status	enum	Windows
	Current status of Nexthink Collector Updater
collector_version	version	Windows | macOS
	Version number of Nexthink Collector installation
cpu_frequency	mhz	Windows | macOS		NU
	CPU frequency
cpu_model	string	Windows | macOS		NU
	CPU model
database_usage	permill	Windows | macOS
	Percentage of the database used by information related with the device
device_encryption_required	boolean			NU
	Indicates whether device encryption is required.
device_manufacturer	string	Windows | macOS		NU
	Indicates the device manufacturer.
device_model	string	Windows | macOS		NU
	Indicates the model of the device.
device_password_required	boolean			NU
	Indicates whether a password is required on the device.
device_product_id	string	Windows | macOS		NU
	Device product ID
device_product_version	string	Windows | macOS		NU
	Device product version
device_serial_number	string	Windows | macOS		NU
	Indicates the device serial number.
device_type	enum	Windows | macOS
	Type of device (desktop, laptop, server, mobile)
device_uid	md5	Windows | macOS
	Indicates the universally unique identifier (based on Engine name and device ID)
device_uuid	string	Windows | macOS
	Indicates the device universally unique identifier (UUID)
directory_service_site	string	Windows		NU
	Site (or location) of an Active Directory (AD) service
disks_manufacturers	string	Windows
	Hard disks manufacturers
disks_smart_index	percent	Windows		NU
	Lowest S.M.A.R.T. index of installed hard disks (index is based on S.M.A.R.T. attributes)
distinguished_name	string	Windows		NU
	Indicates the distinguished name (DN) as seen: For Windows: In Active Directory (AD). if no connection with AD is set up, a '-' is displayed; For Mobile: In the Exchange ActiveSync server
eas_access_state	enum
	Indicates whether the device can access the Exchange ActiveSync server. The possible states are: allowed: the device has access; blocked: the device is blocked; discovery: the device is temporary quarantined while it is being identified by the Exchange ActiveSync server; quarantined: the device is waiting for Exchange ActiveSync administrator approval.
eas_access_state_reason	enum
	Indicates the reason for the device access state. The possible values are: global: caused by the global access settings; device rule: caused by a device access rule; individual: caused by an individual exemption; policy: caused by Exchange ActiveSync policy.
eas_device_access_rule	string
	Indicates the name of the access rule. An access rule allows, blocks or quarantines devices based on the device type, model, OS or user agent characteristics.
eas_device_identity	string
	Indicates the identity of the device in Exchange ActiveSync Server.
eas_exemption	enum
	Indicates whether a personal exemption is set for the device and its user. Possible values are: none; allow; block.
eas_policy_application_status	enum
	Indicates whether the Exchange ActiveSync policy is applied or not. Possible values are: not applied; applied in full: the policy is applied (unless the field 'Allow non provisionable devices' value is 'yes'); partially applied.
eas_policy_name	string
	Indicates the name of the Exchange ActiveSync policy applied to the user's mailbox.
eas_policy_update	datetime
	Indicates the last time the Exchange ActiveSync policy was updated on the device.
email_attachment_enabled	boolean			NU
	Indicates whether attachments can be downloaded to the mobile device through the Exchange ActiveSync protocol.
enforce_password_history	integer	Windows		NU
	Indicates the number of unique passwords that have to be associated with a user account before an old password can be reused.
entity	string	Windows | macOS
	Entity
extended_logon_duration_baseline	millisecond	Windows		NU
	Extended logon duration baseline
firewall_name	string	Windows		NU
	Name of the main firewall
firewall_rtp	enum	Windows
	Indicates whether the firewall real time protection (RTP) is active: on: Indicates that RTP is active; off: Indicates that either RTP is not active or no firewall has been detected; unknown: Indicates that the information could not be retrieved; N/A: This field is not available on this operating system; '-': No data, incompatible collector version or the data is not yet available.
first_seen	datetime	Windows | macOS		NU
	Indicates the first time when the activity of the device was recorded: For Windows and Mac OS: The first time Collector reported activity; For Mobile: The first time the device was reported with a successful synchronization.
graphical_card_ram	byte	Windows		NU
	Amount of RAM of the graphical card with most RAM
graphical_cards	string	Windows
	Installed graphical cards
group_name	string	Windows | macOS		NU
	Name of computer domain or workgroup
guest_account_status	enum	Windows
	Determines if the Guest account is enabled or disabled.
hard_disks	string	Windows | macOS		NC
	List of all hard disks
id	identifier	Windows | macOS
	Unique device identifier
internet_security_settings	enum	Windows
	Internet security settings (ok, at risk or unknown)
ip_addresses	ip_address	Windows | macOS
	List of IP addresses for the device
is_collector_distinguished_name_truncated	boolean	Windows
	Flag indicating whether the collector DN is truncated or not
is_directory_service_site_truncated	boolean	Windows
	Flag indicating whether the DS site is truncated or not
last_boot_duration	millisecond	Windows		NU
	Last boot time duration
last_extended_logon_duration	millisecond	Windows		NU
	Last extended logon duration
last_ip_address	ip_address	Windows | macOS		NU
	Last IP address assigned to the device
last_known_connection_status	enum	Windows | macOS		NU
	Indicates the last known connection status of the device: udp: the device successfully connected via UDP but not TCP. tcp: the device successfully connected via TCP but not UDP. udp_tcp: the device successfully connected via both UDP and TCP. '-': Collector version is below V6.6.
last_local_ip_address	ip_address	Windows | macOS		NU
	Last local IP address assigned to the device
last_logged_on_user	string	Windows		NU
	Last logged on user
last_logon_duration	millisecond	Windows		NU
	Last user logon duration
last_logon_time	datetime	Windows		NU
	Last logon time
last_seen	datetime	Windows | macOS		NU
	Indicates the last time that activity on the device was reported: For Windows and Mac OS: The last time Collector reported activity through the UDP channel, For Mobile: The last time the device successfully synchronized with the Mobile Bridge.
last_seen_on_tcp	datetime	Windows | macOS		NU
	Indicates the last time that the device was successfully connected through the TCP channel. '-': The Collector is an older version that does not support TCP.
last_system_boot	datetime	Windows | macOS		NU
	Last boot time
last_update	datetime	Windows | macOS		NU
	Indicates the last Collector update time.
last_update_status	enum	Windows | macOS		NU
	Indicates the status of the last Collector update: '-': the Collector was never updated successful installation: the last Collector installation was successful package download error: the Collector was not able to download the Collector package from Nexthink Appliance package digital signature error: the Collector was not able to check the Collector package digital signature device reboot required: the device needs to be rebooted to complete the Collector installation package error: the Collector package installation has failed internal error: the Collector package installation has failed for an unexpected reason.
last_updater_request	datetime	Windows		NU
	Last time Nexthink Updater checked for updates
last_windows_update	datetime	Windows		NU
	Time of last system Update
local_administrators	string	Windows
	Users and groups which are members of the Local Administrators group on the device.
local_power_users	string	Windows
	Users and groups which are members of the Local Powers Users group on the device.
logical_cpu_number	integer	Windows | macOS		NU
	Indicates the number of cores multiplied by the number of threads that can run on each core through the use of hyperthreading.
logical_drives	string	Windows | macOS
	List of all logical drives
mac_addresses	mac_address	Windows | macOS
	List of MAC addresses for the device
maximum_password_age	integer	Windows		NU
	Indicates the period in time (in days) during which the password can be used before the system requires the user to change it: Windows: As set up in the group policy; Mobile: As set up in security policies.
membership_type	enum	Windows
	Type of computer membership (domain/workgroup)
minimum_password_age	integer	Windows		NU
	Period of time (in days) that a password must be used before the user can change it.
minimum_password_length	integer	Windows		NU
	Least number of characters that a password for a user account may contain.
monitor_models	string	Windows
	Models of connected monitors
monitor_resolutions	string	Windows
	Screen resolutions of connected monitors
monitors	string	Windows
	Connected monitors
monitors_serial_numbers	string	Windows
	Serial numbers of connected monitors (ordered as in 'Monitors')
name	string	Windows | macOS
	Indicates the name of the device: For Windows: NetBios Name; For Mac OS: Computer name used on the network; For Mobile: Composed by mailbox name and device friendly name.
number_of_antispyware	enum	Windows
	Number of antispyware detected: unknown: Indicates that the information could not be retrieved; N/A: This field is not available on this operating system; '-': No data, incompatible collector version or the data is not yet available.
number_of_antiviruses	enum	Windows
	Number of antiviruses detected: unknown: Indicates that the information could not be retrieved; N/A: This field is not available on this operating system; '-': No data, incompatible collector version or the data is not yet available.
number_of_cores	integer	Windows | macOS		NU
	Number of cores
number_of_cpus	integer	Windows | macOS		NU
	Number of CPUs
number_of_days_since_first_seen	integer	Windows | macOS		NU
	Number of days since activity of the device was first recorded in the system.
number_of_days_since_last_boot	integer	Windows | macOS		NU
	Number of days since last full boot
number_of_days_since_last_eas_policy_update	integer			NU
	Indicates the number of days since the last Exchange ActiveSync policy update.
number_of_days_since_last_logon	integer	Windows		NU
	Number of days since last logon
number_of_days_since_last_seen	integer	Windows | macOS		NU
	Indicates the number of days since the last time the device was seen by Nexthink. The field is updated whenever device activity is detected: For Windows and Mac OS: seen through the UDP channel, For Mobile: seen through the Mobile Bridge.
number_of_days_since_last_seen_on_tcp	integer	Windows		NU
	Indicates the number of days since the last time the device was successfully connected through the TCP channel. '-': The Collector is an older version that does not support TCP.
number_of_days_since_last_windows_update	integer	Windows		NU
	Number of days since last system Update
number_of_firewalls	enum	Windows
	Number of firewalls detected: unknown: Indicates that the information could not be retrieved; N/A: This field is not available on this operating system; '-': No data, incompatible collector version or the data is not yet available.
number_of_graphical_cards	integer	Windows
	Number of installed graphical cards
number_of_monitors	integer	Windows | macOS
	Number of connected monitors
os_architecture	enum	Windows | macOS
	Architecture of device operating system (x86/x64/ARM64)
os_build	version	Windows
	Indicates the build number of the operating system.
os_version_and_architecture	string	Windows | macOS		NU
	Indicates name, version and architecture (when applicable) of the operating system. unknown: the OS version could not be retrieved or it could not be mapped to a recognized value.
password_complexity_requirements	enum	Windows
	Indicates whether password complexity is required: Windows: The password must meet complexity requirements as defined in the group policy; Mobile: No simple passwords are allowed or a minimum password length is set, as defined in the security policy.
platform	enum	Windows | macOS
	Indicates the platform of the device. A platform is a set of operating system families on which the same objects, activities, events and properties can be retrieved. The possible values are: Windows; Mac OS; Mobile.
privileges_of_last_logged_on_users	enum	Windows
	Privileges of the last logged on user (user, power user, administrator)
sd_card_encryption_required	boolean			NU
	Indicates whether SD card encryption is required.
sid	sid	Windows		NU
	Windows security identifier for the device.
storage_policy	enum	Windows | macOS
	Indicates the event storage policy for the device. Possible values are: all: web requests, connections and executions are stored connections and executions; executions; none: no activity is recorded; remove: The device will be removed from Engine during the next cleanup, as long as it is no longer sending data; Note that available events depend on the device platform.
system_drive_capacity	byte	Windows | macOS
	Total capacity of system drive
system_drive_free_space	byte	Windows | macOS
	Total available free space on system drive
system_drive_usage	percent	Windows | macOS		NU
	Use percentage of system drive
total_active_days	day	Windows | macOS
	Total number of days the device was active.
total_drive_capacity	byte	Windows | macOS
	Total capacity of all drives
total_drive_free_space	byte	Windows | macOS
	Total free space on all drives
total_drive_usage	permill	Windows | macOS		NU
	Total use percentage of all drives
total_nonsystem_drive_capacity	byte	Windows | macOS
	Total capacity of all non-system drives
total_nonsystem_drive_free_space	byte	Windows | macOS
	Total free space on all non-system drives
total_nonsystem_drive_usage	percent	Windows | macOS		NU
	Total use percentage of all non-system drives
total_ram	byte	Windows | macOS		NU
	Total amount of RAM
updater_error	string	Windows
	Last Nexthink Collector Updater error
updater_version	version	Windows
	Nexthink Collector Updater version
upgrade_group	enum	Windows | macOS		NU
	Indicates the update group of Nexthink Collector: manual: the Collector is manually updated pilot: the Collector is updated as part of the pilot group main: the Collector is updated as part of the main group.
user_account_control_status	enum	Windows
	User account control status (ok, at risk or unknown)
windows_license_key	string	Windows		NU
	Windows license key
windows_updates_status	enum	Windows
	Windows update status (ok, at risk or unknown)
wmi_status	enum	Windows
	Windows WMI service status (ok, failure)