Data points collected during Movere scanning - Movere (2023)

  • Article
  • 46 minutes to read

This article provides a summary of data points that are collected during Movere scanning.

Active Directory data points

The following data points are collected during an Active Directory scan.

(Video) Inflitrate A Megaship Datalink Missions // Elite Dangerous Easy Money and materials

Devices

Datapoint NameDescription
device_FQDNFQDN of the device. For example: 'SQLSERVER1.IO.PRIV'
device_DNThe distinguished name of the device. For example: 'CN=DC1,OU=Domain Controllers,DC=io,DC=priv in Active Directory'
device_DomainThe Active Directory domain for the device. For example: 'IO.PRIV'
device_dNSHostNameName of the device registered in DNS. For example: 'SQLSERVER1.IO.PRIV'
device_userAccountControlFlags that control the behavior of each device account in Active Directory. For example: Domain Controller = 532480
device_sAMAccountNameDevices samAccountName in Active Directory. For example: 'SQLSERVER1'
device_operatingSystemDevice operating system registered in Active Directory. For example: Windows Server 2003
device_LogonCountThe number of time each device has logged into the queried domain controller. Upper limit of 65535.
device_lastLogonThe date/time the device last logged into the domain.
device_pwdLastSetThe date/time the device last changed its password in the domain.
device_whenCreatedThe date/time the device was joined to the domain.
device_DescriptionThe devices description in Active Directory.

Domains

NameDescription
domain_ShortNameThe Active Directory domain short name. For example: 'io'
domain_LongNameThe domain long name. For example: 'io.priv'
domain_DNThe domain distinguished name in Active Directory. For example: 'DC=IO,DC=PRIV'
domain_maxPwdAgeThe maximum number of days a password to reset a password for it to remain active in the domain.
domain_whenCreatedThe date/time the Active Directory domain was created.
domain_whenChangedThe date a change last occurred in the domain. For example: when the password with a trusted domain was reset.

System Center Configuration Manager

This information is collected if the environment includes System Center Configuration Manager.

NameDescription
SCCM_DNThe distinguished name for each Configuration Manager site server in Active Directory. For example: 'CN=SMS-MP-UL1-SCCMMGR.IO.PRIV,CN=System Management,CN=System,DC=io,DC=priv'
SCCM_cnCommon name of the Configuration Manager site server in Active Directory.
SCCM_DomainThe Active Directory domain for the Configuration Manager site server.
SCCM_dNSHostNameThe DNS host name in Active Directory for the Configuration Manager site server.
SCCM_whenCreatedThe date/time the the Configuration Manager site server object was created in Active Directory.
SCCM_mSSMSSiteCodeThe site code for the Configuration Manager site server. For example: 'UL1'.

Trust

NameDescription
trust_DNTrusted domain distinguished name in Active Directory. For example: 'CN=US.MOVERE.IO,CN=System,DC=MOVERE,DC=IO'.
trust_cnTrusted domain common name. For example: 'CN=US.MOVERE.IO'.
trust_DirectionOne-way or two-way direction.
trust_PartnerThe domain that the selected domain either trustso, r is trusted by. For example: 'MOVERE.IO'.
trust_TypeDomain trust type. For example: Transitive.
trust_ShortNameTrusted domain short name. For example: 'US'.
trust_whenCreatedThe date/time when the domain trust was created.
trust_whenChangedThe date/time a change last occurred to a domain trust. For example: when the trust password was reset.

User

By default Movere collects user information. You can indicate that no user information should be collected, by specifying the -nouser command when you run a scan from the command line. Learn more.

NameDescription
user_DNUser distinguished name. For example: 'CN=Andrew Ireland,CN=user,DC=io,DC=priv in Active Directory'.
user_nameUser full name in Active Directory. For example: 'Andrew Ireland'.
user_cnUser common name in Active Directory. For example: 'Andrew Ireland'.
user_descriptionThe user description in Active Directory.
user_displayNameThe user display name in Active Directory. For example: 'Andrew Ireland'. Standard User = 512.
user_sAMAccountNameUser logon name in Active Directory. For example: 'aireland'.
user_snUser last name. For example: 'Ireland'.
user_mailuser email address. For example: 'aireland@movere.io'.
user_msExchHomeServerNameExchange Server currently housing the user Exchange mailbox.
user_givenNameUser first name. For example: 'Andrew'.
user_coIf used, specifies the user country. For example: 'United States'.
user_titleIf used, represents the user job title. For example: 'Manager'.
user_departmentIf used, specifies the user department. For example: 'Finance'.
user_companyIf used, represents the user company. For example: 'Movere'.
user_whenCreatedThe date/time the user was added to the Active Directory domain.
user_accountExpiresIf used, represents the date the user account will be disabled, and access prohibited to the Active Directory domain.
user_LogonCountThe number of times each user object has logged into the queried domain controller. Upper limit of 65535.
user_employeeidIf used, represents the user employee ID.
user_employeeNumberIf used, represents the user employee number.
user_employeeTypeIf used, represents the user employee type. For example: staff, vendor, contractor, temp, consultant etc.
user_lastlogonThe date/time a user last logged into Active Directory. This is a replicated timestamp that's accurate to within a week of the extraction date.
user_pwdlastsetThe date/time the user last reset their password in the Active Directory domain.
user_domainThe Active Directory domain for the user.

Window inventory scanning

The following datapoints are collected when initiating a Windows inventory scan.

CRM

The following datapoints are not collected by default. Users need to check the Collect PII flag in the options tab to enable bots to collect these datapoints.

(Video) Importing Point Cloud Data from a BLK360 to Desktop

NameDescription
crmuser_DataStoreMicrosoft SQL Server housing the Dynamics CRM database.
crmuser_OrganizationNameThe Dynamics CRM organization name for which the user is a member.
crmuser_FullNameThe user's full name as it appears in Dynamics CRM.
crmuser_EmailAddressThe user email address as it appears in Dynamics CRM.
crmuser_DomainUserThe Dynamics CRM user domain login name.
crmuser_DomainNameThe Active Directory domain that the Dynamics CRM user is a member of.
crmuser_CreatedOnThe date/time the Dynamics CRM user account was created.
crmuser_AccountDisabledIdentifies user accounts that have been disabled in Dynamics CRM.
crmuser_AccessLevelDynamics CRM user access level. For example: Administrative, Read-Only, Read-Write.
crmuser_CALTypeDynamics CRM CAL type. For example: Administrative, Basic, Enterprise, Professional, Essential.
crmversion_VersionDynamics CRM Server version.
crmversion_LatestActivityDateThe date data was last written to the CRM SQL database.

Exchange Server

The following datapoints are collected when Exchange is scanned.

NameDescription
exchange activesync_FirstSyncTimeThe first time a user's ActiveSync device synchronized with an on-premisesises Exchange Server.
exchange activesync_LastSuccessSyncThe last time a user's ActiveSync device successfully synchronized with an on-premises Exchange Server.
exchange activesync_DeviceTypeType of device used to synchronize with an on-premises Exchange Server.
exchange activesync_DeviceIDThe ID of the ActiveSync device.
exchange activesync_DeviceUserAgentThe ActiveSync device agent. For example: Apple-iPhone.
exchange activesync_DeviceModelThe ActiveSync device model. For example: iPhone.
exchange activesync_DeviceFriendlyNameThe ActiveSync device name. For example: iPhone 6 Plus.
exchange activesync_DeviceOSThe ActiveSync device operating system. For example: iOS 10.2.
exchange activesync_IdentityThe ActiveSync device Exchange identity. For example: io. priv/user/Andrew Ireland/ExchangeActiveSyncDevices/iPhone.
exchange activesync_DevicePolicyAppliedThe Exchange ActiveSync policy applied to the ActiveSync device.
exchange activesync_MailboxGuidThe Exchange mailbox GUID to which the ActiveSync device connects.
exchange activesyncpolicy_DeviceEncryptionEnabledActiveSync device encryption policy setting.
exchange activesyncpolicy_AllowStorageCardActiveSync device storage card policy setting.
exchange activesyncpolicy_AllowCameraActiveSync device camera policy setting.
exchange activesyncpolicy_RequireDeviceEncryptionActiveSync device encryption requirement policy setting.
exchange activesyncpolicy_AllowUnsignedApplicationsActiveSync device unsigned applications policy setting.
exchange activesyncpolicy_AllowUnsignedInstallationPackagesActiveSync device unsigned installation packages policy setting.
exchange activesyncpolicy_AllowWiFiActiveSync device Wifi policy setting.
exchange activesyncpolicy_AllowTextMessagingActiveSync device text messaging policy setting.
exchange activesyncpolicy_AllowPOPIMAPEmailActiveSync device POP-IMAP email policy setting.
exchange activesyncpolicy_AllowIrDAActiveSync device IrDA policy setting.
exchange activesyncpolicy_RequireManualSyncWhenRoamingActiveSync device roaming sync policy setting.
exchange activesyncpolicy_AllowDesktopSyncActiveSync device desktop sync policy setting.
exchange activesyncpolicy_AllowBrowserActiveSync device browser policy setting.
exchange activesyncpolicy_AllowConsumerEmailActiveSync device consumer email policy setting
exchange activesyncpolicy_AllowRemoteDesktopActiveSync device remote desktop policy setting
exchange activesyncpolicy_AllowInternetSharingActiveSync device Internet sharing policy setting
exchange activesyncpolicy_AllowBluetoothActiveSync device Bluetooth policy setting
exchange activesyncpolicy_IdentityActiveSync policy ID
exchange activesyncpolicy_GuidActiveSync policy GUID
exchange activesyncpolicy_WhenChangedWhen the ActiveSync policy was last changed
exchange activesyncpolicy_WhenCreatedWhen the ActiveSync policy was created
exchange activesyncpolicy_NameActiveSync policy name
exchange activesyncpolicy_IsValidActiveSync policy validity
exchange activesyncpolicy_IsDefaultActiveSync policy priority
exchange activesyncpolicy_IsDefaultPolicyActiveSync policy global priority
ExchangeCluster_NameExchange cluster name
ExchangeCluster_ServersExchange cluster members
ExchangeCluster_WitnessServerExchange cluster witness server
ExchangeCluster_IdentityExchange cluster name
ExchangeCluster_WhenCreatedThe date that the Exchange cluster was created
ExchangeDlpPolicy_NameExchange Data Loss Prevention (DLP) policy name
ExchangeDlpPolicy_StateExchange Data Loss Prevention (DLP) policy state. For example: Enabled
ExchangeDlpPolicy_ModeExchange Data Loss Prevention (DLP) policy mode. For example: Audit
ExchangeDlpPolicy_DescriptionExchange Data Loss Prevention (DLP) policy description
ExchangeDlpPolicy_IsValidExchange Data Loss Prevention (DLP) policy validity
ExchangeDlpPolicy_WhenChangedExchange Data Loss Prevention (DLP) policy last changed date
ExchangeServer_NameExchange Server name
ExchangeServer_DomainThe Active Directory domain in which the Exchange Server resides
ExchangeServer_EditionExchange Server edition
ExchangeServer_FqdnExchange Server FQDN
ExchangeServer_IsHubTransportServerWhether the Exchange Server is a hub transport server
ExchangeServer_IsClientAccessServerWhether the Exchange Server is a client access server
ExchangeServer_IsEdgeServerWhether the Exchange Server is an edge server
ExchangeServer_IsMailboxServerWhether the Exchange Server is a mailbox server
ExchangeServer_IsUnifiedMessagingServerWhether the Exchange Server is a unified messaging server
ExchangeServer_IdentityThe Exchange Server NetBIOS name
ExchangeServer_IsValidThe Exchange Server validity
ExchangeServer_AdminDisplayVersionThe Exchange Server admin console version
ExchangeServer_WhenCreatedWhen the Exchange Server was created
ExchangeServer_IsExchangeTrialEditionWhether the Exchange Server is a trial installation
ExchangeServer_IsExpiredExchangeTrialEditionWhether the Exchange Server trial period expired
ExchangeServer_RemainingTrialPeriodNumber of remaining days left in the Exchange Server trial
ExchangeJournalRule_RecipientExchange journal recipient
ExchangeJournalRule_ScopeExchange journal scope
ExchangeJournalRule_EnabledExchange journal rule enabled
ExchangeJournalRule_NameExchange journal rule name
ExchangeJournalRule_IsValidExchange journal rules validity
ExchangeJournalRule_WhenChangedExchange journal rules last change date
ExchangeMBSearch_NameThe name of the mailbox search policy name
ExchangeMBSearch_CreatedByUser account used to create the mailbox search policy
ExchangeMBSearch_sourcemailboxesWhether the mailbox is searched to place items on hold
ExchangeMBSearch_StatusSearch status. For example: not started
ExchangeMBSearch_ItemHoldPeriodThe period of time search items remain on hold
ExchangeMBSearch_LastModifiedTimeThe last time the search policy was changed
ExchangeMBSearch_IsValidWhether the search policy is alid
ExchangeMBSearch_InPlaceHoldEnabledWhether in-place hold policy is enabled
ExchangeMBSearch_InPlaceHoldIdentityThe unique ID for the in-place hold policy
ExchangeMBStatistics_DeletedItemCountThe number of deleted items in the mailbox account
ExchangeMBStatistics_ItemCountThe number of items in the mailbox account
ExchangeMBStatistics_LastLogonTimeThe last logon to the mailbox
ExchangeMBStatistics_MailboxGuidThe mailbox GUID
ExchangeMBStatistics_StorageLimitStatusThe mailbox storage limit status
ExchangeMBStatistics_TotalDeletedItemSizeThe size of the deleted items in the mailbox account
ExchangeMBStatistics_TotalItemSizeThe size of the items in the mailbox account
ExchangeMBStatistics_IsValidWhether the mailbox is valid
ExchangeRetentionPolicy_NameThe retention policy name
ExchangeRetentionPolicy_IdentityThe retention policy unique ID
ExchangeRetentionPolicy_WhenChangedWhen the retention policy was last changed
ExchangeRetentionPolicy_WhenCreatedWhen the retention policy was created
ExchangeRetentionPolicy_IsValidWhether the retention policy is valid
ExchangeRetentionPolicy_RetentionPolicyTagLinksRetention policy tags. For example: Never Delete
ExchangeRetentionTags_MessageClassDisplayNameMessage class name. For example: All Mailbox Content
ExchangeRetentionTags_RetentionEnabledWhether the retention policy is enabled
ExchangeRetentionTags_RetentionActionRetention action setting. For example: DeleteAndAllowRecovery
ExchangeRetentionTags_AgeLimitForRetentionAge limit for retention. For example: 30 days
ExchangeRetentionTags_TriggerForRetentionTrigger for retention. For example: WhenDelivered
ExchangeRetentionTags_JournalingEnabledWhether journaling is enabled
ExchangeRetentionTags_RTTypeRetention type. For example: Personal
ExchangeRetentionTags_CommentComments applied to the retention tag
ExchangeRetentionTags_NameRetention tag name. For example: One Month Delete
ExchangeRetentionTags_IdentityRetention tag identity. For example: One Month Delete
ExchangeRetentionTags_WhenChangedWhen the retention tag was last changed
ExchangeRetentionTags_WhenCreatedWhen the retention tag was created
ExchangeRetentionTags_IsValidWhether the retention tag is valid
ExchangeVersion_VersionExchange Server version
ExchangeVersion_LatestActivityDateThe last time activity occurred on the Exchange server

The following datapoints are not collected by default. Users need to check the Collect PII flag in the options tab to enable bots to collect these datapoints.

NameDescription
ExchangeMailbox_DatabaseExchange Server database name
ExchangeMailbox_ExchangeGuidExchange mailbox GUID
ExchangeMailbox_ExchangeUserAccountControlExchange mailbox User Account Control value
ExchangeMailbox_ForwardingAddressForwarding address(es) assigned to the mailbox
ExchangeMailbox_IsMailboxEnabledWhether the mailbox is enabled
ExchangeMailbox_IsResourceWhether it's a resource mailbox
ExchangeMailbox_IsLinkedWhether it's a linked mailbox
ExchangeMailbox_IsSharedWhether it's a shared mailbox
ExchangeMailbox_SamAccountNameuser logon name
ExchangeMailbox_ServerNameThe Exchange Server on which the mailbox resides
ExchangeMailbox_UMEnabledWhether the mailbox is enabled for Unified Messaging
ExchangeMailbox_HiddenFromAddressListsEnabledWhether the mailbox is hidden from the address list
ExchangeMailbox_MaxSendSizeMaximum size email that can be sent from the mailbox
ExchangeMailbox_MaxReceiveSizeMaximum size email that can be received from the mailbox
ExchangeMailbox_ExchangeVersionVersion of the Exchange Server on which the mailbox resides
ExchangeMailbox_RecipientTypeMailbox recipient type. For example: user mailbox
ExchangeMailbox_RecipientTypeDetailsMailbox recipient type details
ExchangeMailbox_WindowsEmailAddressThe mailbox email address
ExchangeMailbox_IdentityThe mailbox identity. For example: io.priv/user/Andrew Ireland
ExchangeMailbox_GuidThe Exchange mailbox GUID
ExchangeMailbox_WhenCreatedThe date the mailbox was created
ExchangeMailbox_IsValidWhether the mailbox is valid
ExchangeMailbox_ArchiveDatabaseThe mailbox archive database
ExchangeMailbox_ArchiveNameThe mailbox archive name
ExchangeMailbox_ArchiveStatusThe mailbox archive status
ExchangeMailbox_RetentionPolicyRetention policy applied to the mailbox
ExchangeMailbox_InPlaceHoldsIn place holds applied to the mailbox
CASMailbox_PrimarySmtpAddressUser's primary SMTP email address
CASMailbox_SamAccountNameUser logon name
CASMailbox_ServerNameExchange Server currently housing the user Exchange mailbox
CASMailbox_DisplayNameThe user display name. For example: Andrew Ireland
CASMailbox_ActiveSyncMailboxPolicyExchange ActiveSync policy applied to the mailbox
CASMailbox_ActiveSyncMailboxPolicyIsDefaultedExchange ActiveSync default policy applied to the mailbox
CASMailbox_ActiveSyncEnabledExchange ActiveSync enabled on the mailbox
CASMailbox_HasActiveSyncDevicePartnershipAn ActiveSync relationship to the mailbox exists
CASMailbox_OWAEnabledThe mailbox is enabled for Outlook Web Access
CASMailbox_IdentityThe mailbox identity. For example: io.priv/user/Andrew Ireland
CASMailbox_IsValidThe mailbox validity
CASMailbox_GuidThe Exchange mailbox GUID
CASMailbox_WhenCreatedThe date the mailbox was created

Lync/Skype for Business

NameDescription
LyncArchive_DescriptionLync/Skype archive policy description
LyncArchive_ArchiveInternalWhether the archive is internal. For example: TRUE
LyncArchive_ArchiveExternalWhether the archive is external. For example: FALSE
LyncArchive_ScopeClassThe archive scope. For example: GLOBAL
LyncArchive_IdentityThe archive identity. For example: GLOBAL
LyncConf_AllowIPAudioLync/Skype conference policy: Allow IP audio
LyncConf_AllowIPVideoLync/Skype conference policy: Allow IP video
LyncConf_DescriptionLync/Skype conference policy description
LyncConf_AllowParticipantControlLync/Skype conference policy: Allow participant control
LyncConf_AllowAnnotationsLync/Skype conference policy: Allow annotations
LyncConf_DisablePowerPointAnnotationsLync/Skype conference policy: Disable PowerPoint annotations
LyncConf_AllowUserToScheduleMeetingsWithAppSharingLync/Skype conference policy: Allow user to schedule meetings with application sharing
LyncConf_AllowAnonymoususerToDialOutLync/Skype conference policy: Allow anonymous user to dial out
LyncConf_AllowAnonymousParticipantsInMeetingsLync/Skype conference policy: Allow anonymous participants in meetings
LyncConf_AllowExternaluserToSaveContentLync/Skype conference policy: Allow external user to save content
LyncConf_AllowExternalUserControlLync/Skype conference policy: Allow external user control
LyncConf_AllowExternaluserToRecordMeetingLync/Skype conference policy: Allow external user to record meeting
LyncConf_AllowPollsLync/Skype conference policy: Allow polls
LyncConf_EnableDialInConferencingLync/Skype conference policy: Enable dial in conferencing
LyncConf_EnableAppDesktopSharingLync/Skype conference policy: Enable application desktop sharing
LyncConf_AllowConferenceRecordingLync/Skype conference policy: Allow conference recording
LyncConf_EnableP2PRecordingLync/Skype conference policy: Enable peer-to-peer recording
LyncConf_EnableFileTransferLync/Skype conference policy: Enable file transfer
LyncConf_EnableP2PFileTransferLync/Skype conference policy: Enable peer-to-peer file transfer
LyncConf_EnableP2PVideoLync/Skype conference policy: Enable peer-to-peer video
LyncConf_EnableDataCollaborationLync/Skype conference policy: Enable data collaboration
LyncConf_MaxVideoConferenceResolutionLync/Skype conference policy: Maximum video conference resolution
LyncConf_MaxMeetingSizeLync/Skype conference policy: Maximum meeting size
LyncConf_AudioBitRateKbLync/Skype conference policy: Audio bit rate in kilobits
LyncConf_VideoBitRateKbLync/Skype conference policy: Video bit rate in kilobits
LyncConf_AppSharingBitRateKbLync/Skype conference policy: Application sharing bit rate in kilobits
LyncConf_FileTransferBitRateKbLync/Skype conference policy: File transfer bit rate in kilobits
LyncConf_ScopeClassLync/Skype conference policy scope class. For example: Global
LyncConf_IdentityLync/Skype conference policy: Identity. For example: Global
LyncExternal_DescriptionLync/Skype external policy description
LyncExternal_EnableFederationAccessLync/Skype external policy: Enable federation access
LyncExternal_EnablePublicCloudAccessLync/Skype external policy: Enable public cloud access
LyncExternal_EnablePublicCloudAudioVideoAccessLync/Skype external policy: Enable public cloud audio video access
LyncExternal_EnableOutsideAccessLync/Skype external policy: Enable outside access
LyncExternal_ScopeClassLync/Skype external policy scope class. For example: Global
LyncExternal_IdentityLync/Skype external policy: Identity. For example: Global
LyncMobility_DescriptionLync/Skype mobility policy description
LyncMobility_EnableOutsideVoiceLync/Skype mobility policy: Enable outside voice
LyncMobility_EnableMobilityLync/Skype mobility policy: Enable mobility
LyncMobility_ScopeClassLync/Skype mobility policy scope class. For example: Global
LyncMobility_IdentityLync/Skype mobility policy: Identity. For example: Global
LyncServer_SiteLync/Skype site name
LyncServer_FQDNLync/Skype server fully qualified domain name
LyncServer_IdentityLync/Skype server device name
LyncServer_ServicesLync/Skype server service(s). For example: Central Management Database
LyncServer_ComputersLync/Skype site servers
LyncVersion_VersionLync/Skype Server version
LyncVersion_LatestActivityDateThe last time activity occurred on the Lync/Skype server
LyncVoice_IdentityLync/Skype voice policy: Identity. For example: Global
LyncVoice_DescriptionLync/Skype voice policy description
LyncVoice_AllowSimulRingLync/Skype voice policy: Allow simultaneous ring
LyncVoice_AllowCallForwardingLync/Skype voice policy: Allow all forwarding
LyncVoice_AllowPSTNReRoutingLync/Skype voice policy: Allow PSTN re-routing
LyncVoice_NameLync/Skype voice policy name
LyncVoice_DefaultPolicyLync/Skype voice policy: Is this the default policy?
LyncVoice_EnableDelegationLync/Skype voice policy: Enable delegation
LyncVoice_EnableTeamCallLync/Skype voice policy: Enable team all
LyncVoice_EnableCallTransferLync/Skype voice policy: Enable call transfer
LyncVoice_EnableCallParkLync/Skype voice policy: Enable call park
LyncVoice_EnableMaliciousCallTracingLync/Skype voice policy: Enable malicious call tracing
LyncVoice_EnableBWPolicyOverrideLync/Skype voice policy: Enable bandwidth policy override
LyncVoice_PreventPSTNTollBypassLync/Skype voice policy: Prevent PSTN toll bypass

The following datapoints are not collected by default. Users need to check the Collect PII flag in the options tab to enable bots to collect these datapoints.

NameDescription
LyncUser_SamAccountNameLync/Skype user: samAccountName in Active Directory
LyncUser_UserPrincipalNameLync/Skype user email address
LyncUser_AudioVideoDisabledLync/Skype user: Audio video disabled
LyncUser_IPPBXSoftPhoneRoutingEnabledLync/Skype user: IP PBX soft phone routing enabled
LyncUser_RemoteCallControlTelephonyEnabledLync/Skype user: Remote call control telephony enabled
LyncUser_HostedVoiceMailLync/Skype user: Hosted voicemail
LyncUser_EnabledForFederationLync/Skype user: Enabled for federation
LyncUser_EnabledForInternetAccessLync/Skype user: Enabled for Internet access
LyncUser_PublicNetworkEnabledLync/Skype user: Public network enabled
LyncUser_EnterpriseVoiceEnabledLync/Skype user: Enterprise voice enabled
LyncUser_EnabledForRichPresenceLync/Skype user: Enabled for rich presence
LyncUser_SipAddressLync/Skype user: Sip address
LyncUser_EnabledLync/Skype user: State
LyncUser_TargetRegistrarPoolLync/Skype user: Target registrar pool
LyncUser_VoicePolicyLync/Skype user: Voice policy assigned
LyncUser_MobilityPolicyLync/Skype user: Mobility policy assigned
LyncUser_ConferencingPolicyLync/Skype user: Conferencing policy assigned
LyncUser_RegistrarPoolLync/Skype user: Registrar pool
LyncUser_ArchivingPolicyLync/Skype user: Archiving policy assigned
LyncUser_ExternalAccessPolicyLync/Skype user: External access policy assigned
LyncUser_GuidLync/Skype user: GUID
LyncUser_WhenCreatedLync/Skype user: When created
LyncUser_IsValidLync/Skype user: Is the account valid?
LyncUserLastLogon_GuidLync/Skype user: GUID
LyncUserLastLogon_LastNewRegisterTimeLync/Skype user: Last logon timestamp
NameDescription
SharePointFarm_ConfigDSQL Server in which SharePoint farm data is stored
SharePointFarm_MaxOSVersionThe highest operating system version on which the SharePoint farm runs on. For example: 2012
SharePointFarm_MaxSPVersionThe highest SharePoint version in the SharePoint farm. For example: 2016
SharePointFarm_MaxSPEditionThe highest SharePoint edition in the SharePoint farm. For example: Enterprise
SharePointFarmPS_ConfigDBSQL Server in which Project Server data is stored
SharePointFarmPS_MaxOSVersionThe highest operating system version on which the Project Server runs. For example: 2012
SharePointFarmPS_MaxSPVersionThe highest SharePoint version on which the Project Server runs. For example: 2016
SharePointFarmPS_MaxSPEditionThe SharePoint edition on which the Project Server is running. For example: Enterprise Project Server only runs on SharePoint Enterprise
SharePointFeatures_SiteIdThe SharePoint site Site ID
SharePointFeatures_WebIdThe SharePoint site Web ID
SharePointFeatures_FeatureIdAre SharePoint Enterprise features enabled?
SharePointFeatures_TimeActivatedThe date SharePoint Enterprise features were enabled on the site
SharePointSites_WebIdThe SharePoint sites web ID
SharePointSites_SiteIdThe SharePoint sites site ID
SharePointSites_ParentIdThe SharePoint sites parent ID
SharePointSites_EditionAre SharePoint Enterprise features enabled?
SharePointSites_MembersDoes the SharePoint site has its own members list?
SharePointSites_FullURLThe full URL address for the SharePoint site. For example: http://sharepoint/sites/IO
SharePointSites_WebTitleThe SharePoint site display name. For example: IO SharePoint
SharePointSites_TimeCreatedThe date that the SharePoint site was created
SharePointSites_RequestAccessEmailThe user email contact to request access to the SharePoint site
SharePointSites_bEntByParentingIs there an Enterprise feature enabled child site utilizing this sites membership list?
SharePointSiteVersions_SiteIdThe SharePoint Server Site ID
SharePointSiteVersions_VersionIdThe SharePoint Server version ID
SharePointSiteVersions_VersionThe SharePoint Server version. For example: 15.0.2.0
SharePointSiteVersions_MOSS/WSSThe SharePoint Server feature set i.e. full install versus foundation only
SharePointVersion_VersionThe SharePoint Server version. For example: 16.0.6.0
SharePointVersion_LatestActivityDateThe date of the last activity in the SharePoint Servers SQL configuration database

The following datapoints are not collected by default. Users need to check the Collect PII flag in the options tab to enable bots to collect these datapoints.

(Video) Scan to BIM: Utilize Real-time Point Cloud Data to Eliminate Costly Construction Mistakes

NameDescription
SharePointUserList_tp_SiteIdThe SharePoint site Site ID
SharePointUserList_tp_IdThe SharePoint user site specific ID
SharePointUserList_tp_LoginThe SharePoint user login name
SharePointUserList_tp_TypeThe SharePoint user connection type
SharePointUserList_tp_DomainThe SharePoint user domain
SharePointUserList_tp_TitleThe SharePoint user display name
SharePointUserList_Last_AccessedThe date the user last accessed the SharePoint site
SharePointMembers_WebIdThe SharePoint sites Web ID
SharePointMembers_UserIdThe SharePoint user site specific ID
SharePointMembers_SiteIdThe SharePoint site Site ID
SharePointMembers_tp_LoginThe SharePoint user login name
SharePointMembers_tp_Typehe SharePoint user connection type
SharePointMembers_tp_DomainThe domain of the SharePoint user
SharePointMembers_tp_TitleThe SharePoint user display name

Software Asset Management (SAM)

NameDescription
SAMWinHotFix_CaptionWindows hotfix title. For example: KB3200970
SAMWinHotFix_DescriptionWeb link to the Windows hotfix. For example: https://support.microsoft.com/?kbid=3200970
SAMWinHotFix_HotFix IDWindows hotfix type. For example: Security Update
SAMWinFeatures_IDWindows feature identifier
SAMWinFeatures_Parent IDWindows feature parent identifier
SAMWinFeatures_CaptionWindows feature title. For example: IIS Management Console
SAMWinProcess_Process NameWindows process name. For example: CcmExec
SAMWinProcess_File PathWindows process path. For example: C:\Windows\CCM\CcmExec.exe
SAMWinProcess_Product NameWindows product name. For example: System Center Configuration Manager
SAMWinProcess_Product VersionWindows product version. For example: 5.00.8412.1000
SAMWinProcess_Company NameProducts publisher. For example: Microsoft Corporation
SAMWinProcess_File DescriptionProcesses description. For example: Host Process for Microsoft Configuration Manager
SAMWinProcess_Legal CopyrightCopyright details. For example: Copyright (C) Microsoft Corporation. All rights reserved.
SAMWinProcess_Legal TrademarksTrademarks. For example: SAMWinProcess_Comments - Process comments. For example: Citrix XenServer Windows Guest Agent
SAMIISSites_Site NameIIS site name. For example: Movere.Qlik.Api
SAMIISSites_BindingsBindings details. For example: [https] *:443:
SAMIISSites_Auto StartAuto start enabled
SAMIISSites_StateSite state. For example: Started
SAMIISSites_App PathIIS app path. For example: /SMS_MP
SAMIISSites_App Pool NameIIS app pool name. For example: SMS Management Point Pool
SAMIISSites_App Virtual PathIIS app virtual path. For example: /_wpresources
SAMIISSites_App Physical PathIIS app physical path. For example: C:\Program Files\SMS_CCM\SMS_MP
SAMIISSites_Web Config FoundIIS app configuration found SAMIISAppPools_App Pool Name - IIS app pool name. For example: MSExchangeMapiMailboxAppPool
SAMIISAppPools_Managed Runtime VersionVersion. For example: v4.0
SAMIISAppPools_Managed Pipeline ModePipeline mode. For example: Integrated
SAMIISAppPools_StateIIS app pool state. For example: Started
SAMIISAppPools_Enable 32 BitIs 32 bit enabled
SAMIISAppPools_IdentityApp pool identity. For example: LocalSystem
SAMIISAppPools_Worker Process IDsProcess identifier
SAMDotNetComponents_File PathComponent file path. For example: C:\Program Files\Microsoft SQL Server\120\DTS\Binn
SAMDotNetComponents_File NameComponent file name. For example: ISServerExec.exe
SAMDotNetComponents_File VersionComponent file version. For example: 12.0.2000.8 ((SQL14_RTM).140220-1752)
SAMDotNetComponents_Product NameProduct that component is part of. For example: Microsoft SQL Server
SAMDotNetComponents_Product VersionProduct version. For example: 12.0.2000.8
SAMDotNetComponents_CopyrightCopyright details. For example: Microsoft Corp. All rights reserved.
SAMDotNetComponents_CompanyProducts publisher. For example: Microsoft Corporation
SAMDotNetComponents_DescriptionComponent description. For example: SSIS Execution Process
SAMDotNetComponents_Date ModifiedDate modified
SAMDotNetConfigFiles_File PathComponent configuration file path. For example: C:\Program Files\Microsoft SQL Server\120\DTS\Binn
SAMDotNetConfigFiles_File NameComponent configuration file name. For example: MsDtsSrvr.exe.config
SAMDotNetConfigFiles_App Setings Key CountKey Count
SAMDotNetConfigFiles_App Settings Secrets FoundSecrets Found
SAMDotNetConfigFiles_App Settings Key NamesKey Names
SAMDotNetConfigFiles_Dot Net Version.Net version. For example: 4.6.2
SAMDotNetConnectionStrings_File Path.Net connection string. For example: C:\Program Files\SMS_CCM\EnrollmentPoint
SAMDotNetConnectionStrings_Connection String Name.Net connection string name. For example: Default
SAMDotNetConnectionStrings_Server NameConnection server. For example: SCCMSQL.io.priv
SAMDotNetConnectionStrings_Database NameDatabase name. For example: CM_UL1
SAMDotNetConnectionStrings_Provider NameProvider name. For example: System.Data.SqlClient
SAMDotNetConnectionStrings_Is SecureConnection is secure
SAMDatabase_DataSourceThe frontend Windows Server a SQL Server DSN record was found on
SAMDatabase_DBServerThe SQL Server the DSN record is pointing to
SAMDatabase_DBNameThe database housing the technology the DSN record is pointing to
SAMDatabase_DBTypeThe technology the DSN record relates to. For example: SCCM
SAMDatabase_VersionThe version of technology the DSN SAMGeo_City - The name of the city the ISP provider returned for the device
SAMGeo_CountryThe name of the country the ISP provider returned for the device
SAMGeo_CountryCodeThe country code the ISP provider returned for the device
SAMGeo_LatitudeThe latitude the ISP provider returned for the device
SAMGeo_LongitudeThe longitude the ISP provider returned for the device
SAMHDD_PhysicalDriveThe devices physical storage drive type. For example: SCSI Disk Device
SAMHDD_LogicalDriveLetterThe devices logical drive letter
SAMHDD_LogicalDriveNameThe devices logical drive name
SAMHDD_FileSystemThe devices storage file system. For example: NTFS
SAMHDD_TotalSizeThe total size of the devices drive
SAMHDD_FreeSizeThe remaining space on the devices drive
SAMMSAppsFound_MSAppTypeMicrosoft product(s) installed on the device
SAMMSAppsFound_EditionThe edition of the Microsoft product(s) installed
SAMMSAppsFound_ProductVerThe version of the Microsoft product(s) installed
SAMNetwork_MACAddressThe MAC address for each network card installed in the device
SAMNetwork_IPAddressThe IP address for each network card installed in the device
SAMNetwork_SubnetMaskThe subnet mask for each network card installed in the device
SAMOSActivation_ActivationStringHow and if the devices Windows operating system was activated
SAMServices_NameThe name of the services (and processes) installed on Windows Server and (Linux) devices
SAMServices_StateThe state of each service when scanned
SAMServices_CreationDateThe date each service was created on the device
SAMServices_SvcPathThe services install path
SAMSoftware_RegistryKeyThe installed product's registry key
SAMSoftware_InstallDateThe installed product's installation date
SAMSoftware_VersionThe installed product's version
SAMSoftware_PublisherThe installed product's publisher
SAMSoftware_DisplayNameThe installed products display name
SAMSoftware_LastRunDateThe date the installed product was last run
SAMSQLAG_InstanceThe SQL Server instance name
SAMSQLAG_ClusterThe SQL cluster name if the instance is clustered
SAMSQLAG_DatabaseThe SQL database the availability group setting applies toSAMSQLAG_SyncState - The database's synchronization state. For example: SYNCHRONIZED
SAMSQLAG_AvailabilityGroupThe SQL availably group name
SAMSQLAG_PrimaryReplicaThe primary replica of the SQL database
SAMSQLAG_PrimaryRecoveryHealthThe state of the primary replica. For example: ONLINE
SAMSQLAG_RoleThe SQL Servers role in the availability group. For example: PRIMARY
SAMSQLAG_SyncHealthThe availably groups synchronization health. For example: HEALTHY
SAMSQLAG_PrimaryAllowConnDoes the primary replica allow connections. For example: YES
SAMSQLAG_SecondaryAllowConnDo the secondary replicas all connections. For example: READ_ONLY
SAMSQL-Alias_AliasThe SQL Servers alias if one has been specified
SAMSQL-Alias_ActualThe SQL Servers FQDN and the port number SQL is using. For example: SCCMSQL.IO.PRIV,1433
SAMSQL-BIFeatures_InstanceThe SQL Server instance name
SAMSQL-BIFeatures_ClusterThe SQL cluster name if the instance is clustered
SAMSQL-BIFeatures_VersionThe full SQL Server version. For example: 11.3.6020.0
SAMSQL-BIFeatures_EditionThe SQL instance edition. For example: Enterprise
SAMSQL-BIFeatures_FeaturesThe SQL business intelligence features installed in the instance. For example: Analysis_Server_Full=3
SAMSQL-BIFeatures_ComponentThe SQL business intelligence component installed in the instance. For example: AS
SAMSQL-CPU_InstanceThe SQL Server instance name
SAMSQL-CPU_ClusterThe SQL cluster name if the instance is clustered
SAMSQL-CPU_LogicalCPUsThe number of logical CPUs visible to the SQL Server
SAMSQL-CPU_HTRatioThe hyper threading ratio. For example: 1
SAMSQL-CPU_SQLCPUThe number of CPUs visible to the SQL Server
SAMSQL-DB_InstanceThe SQL Server instance name
SAMSQL-DB_ClusterThe SQL cluster name if the instance is clustered
SAMSQL-DB_DatabaseThe SQL database name
SAMSQLServerDatabases_SystemDBIs the SQL database a system database
SAMSQL-DB_StateThe SQL database state. For example: ONLINE
SAMSQL-DB_DateThe date the SQL database was created
SAMSQL-DB_DbSizeThe SQL database data size
SAMSQL-DB_LogSizeThe SQL database log size
SQLDBsReceived_DatabaseThe name of the SQL database queried by Movere. For example: vCenter
SQLDBsReceived_LatestActivityDateThe date of the last activity to occur in the SQL database
SAMSQL-Hist_InstanceThe SQL Server instance name
SAMSQL-Hist_ClusterThe SQL cluster name if the instance is clustered
SAMSQL-Hist_AvgReadsThe total number of reads performed since last reboot divided by the number of days since last reboot
SAMSQL-Hist_AvgWritesThe total number of writes performed since last reboot divided by the number of days since last reboot
SAMSQL-Hist_AvgConnectionsThe total number of connections to the SQL Server since last reboot divided by the number of days since last reboot
SAMSQL-Hist_UptimeDaysThe number of days since the SQL Server was last rebooted
SAMSQL-LS_InstanceThe SQL Server instance name
SAMSQL-LS_ClusterThe SQL cluster name if the instance is clustered
SAMSQL-LS_PrimaryServerThe primary SQL Server in the log shipping configuration
SAMSQL-LS_PrimaryDatabaseThe primary database in the log shipping configuration
SAMSQL-LS_SecondaryServerThe secondary SQL Server in the log shipping configuration
SAMSQL-LS_SecondaryDatabaseThe secondary database in the log shipping configuration
SAMSQL-MR_InstanceThe SQL Server instance name
SAMSQL-MR_ClusterThe SQL cluster name if the instance is clustered
SAMSQL-MR_DatabaseThe SQL database being mirrored
SAMSQL-MR_StateThe state of the synchronization. For example: SYNCHRONIZED
SAMSQL-MR_RoleThe SQL Servers role in a mirrored configuration. For example: PRINCIPAL
SAMSQL-MR_PartnerThe SQL Servers partner in the mirrored configuration
SAMSQL-MR_WitnessThe SQL Server witness in the mirrored configuration
SAMSQLServerInstances_InstanceThe SQL Server instance name
SAMSQLServerInstances_PortThe port number the SQL instance is using. For example: 1433
SAMSQLServerInstances_ClusterThe SQL cluster name if the instance is clustered
SAMSQLServerInstances_AllNodesIf clustered, the SQL nodes in the cluster
SAMSQLServerInstances_ActiveNodeIf clustered, the active SQL node in the cluster
SAMSQLServerInstances_VersionThe SQL Server instance version. For example: 2016
SAMSQLServerInstances_FullVersionThe SQL Server instance full version. For example: 13.0.1601.5
SAMSQLServerInstances_EditionThe SQL instance edition. For example: Enterprise
SAMSQLServerInstances_DBCountThe number of databases in the SQL instance
SAMSQLServerInstances_LogShippingIn the SQL instance participating in a log shipping configuration
SAMSQLServerInstances_MirroringIn the SQL instance participating in a mirroring configuration
SAMSQLServerInstances_AVGroupIn the SQL instance participating in a SQL availability group configuration
SAMSQLServerServices_InstanceThe SQL service instance name
SAMSQLServerServices_TypeThe SQL service type. For example: Reporting Service
SAMSQLServerServices_StateThe SQL service state. For example: Running
SAMSQLServerServices_CreationDateThe date the SQL service was created on the device
SAMSQLServerServices_PathThe path the SQL service was created in
SAMSQL-Ver_InstanceThe SQL Server instance name
SAMSQL-Ver_ClusterThe SQL cluster name if the instance is clustered
SAMSQL-Ver_VersionThe full SQL Server version. For example: 11.3.6020.0
SAMSQL-Ver_EditionThe SQL instance edition. For example: Enterprise
SAMSQL-Ver_PortThe port number the SQL instance is using. For example: 1433
SAMSQL-Ver_ActiveNodeIf clustered, the active SQL node in the cluster
SAMSQL-Ver_AllNodesIf clustered, the SQL nodes in the cluster
SAMSystem_FQDNThe devices fully qualified domain name
SAMSystem_OSThe devices operating system
SAMSystem_NetBIOSThe devices NetBIOS name
SAMSystem_PIDThe devices operating system product ID
SAMSystem_OSActivationMethodHow and if the devices Windows operating system was activated
SAMSystem_SerialNoThe devices serial number
SAMSystem_UUIDThe devices Universally Unique Identifier
SAMSystem_RegOrgThe organization the device is registered to
SAMSystem_MakeThe devices make. For example: Hewlett-Packard
SAMSystem_ModelThe devices model. For example: HP Pavilion dv5
SAMSystem_Domainhe Active Directory domain the device resides in
SAMSystem_TotalRAMThe total amount of RAM installed in the device
SAMSystem_AvailableRAMThe amount of unused RAM installed in the device when it was last inventoried
SAMSystem_CPUModelThe devices CPU model. For example: Intel Core2 Duo T9400 @ 2.53GHz
SAMSystem_CPUCountThe number of processors installed in the device
SAMSystem_CPUCoresThe number of cores installed in the device
SAMSystem_Is 64 BitSystems processor architecture
SAMSystem_Service PackWindows service pack installed on the system (if applicable)
SAMSystem_Boot TimeLast time the Windows system was started
SAMSystem_ScanDateThe date the device was last inventoried
SAMSystem_SWLinesThe number of software title entries retrieved from the device when last inventoried
SAMSystem_SWFlagsProduct titles found on the device that require follow up. For example: Exchange
SAMSystem_PrefUserThe primary user of the device based upon the highest number of login per user
SAMSystem_PrefUserDomainThe domain the primary user of the device is a member of
SAMSystem_OriginalCPUModelThe raw CPU model returned including legal symbols and additional spacing. For example: Intel(R) Core(TM)2 Duo CPU T9400 @ 2.53GHz
SAMVersion_LatestActivityDateThe last time the device was successfully inventoried

The following datapoints are not collected by default. Users need to check the Collect PII flag in the options tab to enable bots to collect these datapoints.

NameDescription
SAMSoftwareLastUse_CaptionThe name of the Microsoft product
SAMSoftwareLastUse_VersionThe version of the Microsoft product
SAMSoftwareLastUse_LastUseThe date the Microsoft product or component was last used
SAMSoftwareLastUse_InstallStateThe Microsoft product's installation state
SAMSoftwareLastUse_IsInstalledIs the Microsoft product installed
SAMSoftwareLastUse_UserThe login name of the last user of the device
SAMSoftwareLastUse_UserDomainThe domain the last user of the device is a member of
SAMUser_UserNameUser names connected to the device
SAMUser_UserDomainThe domain the user(s) who have connected to the device are a member of
SAMUser_ConnectionMethodThe type of connect each user has made to the device. For example: Interactive
SAMUser_LogonDateTimeThe date/time the connection was made
SAMUser_TotalMinsThe total number of minutes connected
SAMUser_TotalLogonsThe total number of logons
SAMSystem_RegUserThe user the device is registered to
SAMSystem_LastUserThe last user of the device before it was last inventoried
SAMSystem_LastUserDomainThe domain the last user of the device belongs to

System Center DPM

NameDescription
SysCntDPMManaged_FQDNThe fully qualified domain name of the device being backed up by DPM
SysCntDPMManaged_BackupStateThe state of the last backup performed. For example: Succeeded
SysCntDPMManaged_CompletionDateThe date the last backup was performed
SysCntDPMVersion_VersionThe DPM Servers version. For example: 5.0.158.0
SysCntDPMVersion_LatestActivityDateThe date of the last activity to occur in the DPM SQL database
SysCntOMManaged_FQDNThe fully qualified domain name of the device being monitored by SCOM
SysCntOMManaged_GroupNameThe group the device belongs to in SCOM. For example: All Windows Computers
SysCntOMManaged_IsDeleted_OMHas the device been deleted from SCOM
SysCntOMManaged_LastModifiedWhen were the SCOM configuration applied to the device last modified
SysCntOMVersion_VersionThe SCOM Servers version. For example: 7.2.11719.0
SysCntOMVersion_LatestActivityDateThe date of the last activity to occur in the SCOM SQL database

Oracle information

NameDescription
Oracle_InstanceThis is the DB_UNIQUE_NAME for the oracle instance.
Oracle_VersionVersion of the oracle instance.
Oracle_PathThe oracle instance is saved in this location.
Oracle_AutoStartIf set to Y, the oracle instance will start automatically when the system boots up.

Windows (actual resource consumption scan)

The following datapoints are collected when a user performs a Windowsactual resource consumption scan.

SQL information

The SQL information is collected during actual resource consumption scanonly if a user configures to do so in the console or the config file.

NameDescription
arcsqlcpuhour_CpuIdlePercentPercentage of the CPU that is arcsqlcpuhour_CpuOtherPercent
Percentage of the CPU that being utilized by services other than SQL Server
arcsqlcpuhour_EventDatetimeUtcThe UTC date / time the consumption date was collected
arcsqlcpuio_CpuTimeMsCPU time used by SQL in millisecond intervals
arcsqlcpuio_CpuPercentThe percentage of the CPU being consumed by SQL
arcsqlcpuio_TotalIoMbTotal SQL related I/O in Mb
arcsqlcpuio_ArcDatetimeUtcThe UTC date / time the consumption date was collected
arcsqldbconnections_ClientAddressThe IP address of the device connecting to the SQL database NOTE: Not considered External PII because this IP address is specific to servers not workstations.
arcsqldbconnections_ProgramNameThe program being used to connect to the SQL database
arcsqldbconnections_HostNameThe name of the device connecting to the SQL database
arcsqldbconnections_LoginNameThe user/service account being used to connect to the SQL database
arcsqldbconnections_ConnectionCountThe number of connections the program connecting to the SQL database is creating
arcsqldbconnections_ArcDatetimeUtcThe UTC date / time the consumption date was collected
arcsqldbstats_SizeOnDiskMbThe SQL database size on disk in Mb
arcsqldbstats_UsedMbThe amount of space the SQL database is actually using versus its size on disk in Mb
arcsqldbstats_IsDataThe amount of the SQL database that is data versus log
arcsqldbstats_ReadMbThe quantity of SQL database reads that have occurred since last reboot in Mb
arcsqldbstats_WrittenMbThe quantity of SQL database writes that have occurred since last reboot in Mb
arcsqldbstats_NumberOfReadsThe total number of SQL database reads that have occurred since last reboot
arcsqldbstats_NumberOfWritesThe total number of SQL database writes that have occurred since last reboot
arcsqldbstats_IoStallReadMsSQL IO stall reads in milliseconds
arcsqldbstats_IoStallWriteMsSQL IO stall writes in milliseconds
arcsqldbstats_ArcDatetimeUtcThe UTC date / time the consumption date was collected
arcsqldrivestats_DriveThe SQL drive letter
arcsqldrivestats_VolumeMountPointThe SQL mount point
arcsqldrivestats_FileSystemTypeThe SQL file system type
arcsqldrivestats_LogicalVolumeNameThe SQL logical volume name
arcsqldrivestats_TotalSizeGbThe total drive size in Gb
arcsqldrivestats_UsedSizeGbThe amount of the drive used in Gb
arcsqldrivestats_ReadLatencyMsSQL read latency in milliseconds
arcsqldrivestats_WriteLatencyMsSQL write latency in milliseconds
arcsqldrivestats_OverallLatencyMsSQL overall latency in milliseconds
arcsqldrivestats_AverageBytesPerReadSQL average bytes per read
arcsqldrivestats_AverageBytesPerWriteSQL average bytes per write
arcsqldrivestats_AverageBytesPerTransferSQL average bytes per transfer
arcsqldrivestats_ArcDatetimeUtcThe UTC date / time the consumption date was collected

The following datapoints are not collected by default. Users need to check the Collect PII flag in the options tab to enable bots to collect these datapoints.

(Video) DIY Scanning Laser Microscope

NameDescription
arcsqldbconnections_LoginNameThe user/service account being used to connect to the SQL database

Windows disk information

NameDescription
arcwindisk_DiskQueueLengthDisk queue length when the scan was performed
arcwindisk_AvgDiskQueueLengthAverage disk queue length when the scan was performed
arcwindisk_ReadMbPerSecDisk reads in Mb per second
arcwindisk_WriteMbPerSecDisk writes in Mb per second
arcwindisk_ReadDiskLatencyThe disks read latency
arcwindisk_WriteDiskLatencyThe disks write latency
arcwindisk_KbPerTransferThe size of the data moved to disk in Kb per transfer
arcwindisk_ArcDatetimeUtcThe UTC date / time the consumption date was collected

Windows event log information

The following datapoints are not collected by default. Users need to check the Collect PII flag in the options tab to enable bots to collect these datapoints.

NameDescription
arcwineventlog_LogNameName of the log that event data is being collected from
arcwineventlog_CategoryThe event task category
arcwineventlog_SourceThe logs source
arcwineventlog_EventIdThe event ID
arcwineventlog_EventDateThe date the event occurred
arcwineventlog_UserNameThe user/service name corresponding to the event
arcwineventlog_MessageThe events detailed message
arcwineventlog_ArcDatetimeUtcThe UTC date / time the consumption date was collected

Windows netstat information

NameDescription
arcwinnetstat_LocalAddressThe local IP address of the netstat connection NOTE: Not considered External PII because this IP address is specific to servers not workstations.
arcwinnetstat_ForeignAddressThe foreign address of the netstat connection NOTE: Considered External PII because connections will include both servers and workstations.
arcwinnetstat_ForeignPortThe port number the foreign address is using
arcwinnetstat_StateThe state of the connection when the scan was performed
arcwinnetstat_ProcessNameThe name of the process being connected to and its install path
arcwinnetstat_ArcDatetimeUtcThe UTC date / time the consumption date was collected

Windows network information

NameDescription
arcwinnetwork_SendMbPerSecThe amount of data sent from the device in Mb per second since the previous scan
arcwinnetwork_ReceiveMbPerSeche amount of data received by the device in Mb per second since the previous scan
arcwinnetwork_TotalMbSentThe total amount of data sent from the device in Mb
arcwinnetwork_TotalMbReceivedThe total amount of data received by the device in Mb
arcwinnetwork_ArcDatetimeUtcThe UTC date / time the consumption date was collected

Windows process information

NameDescription
arcwinprocess_ProcessNameThe name of the process consuming CPU and memory resources
arcwinprocess_ProcessPathThe install path of the process consuming CPU and memory resources
arcwinprocess_ProcessVersionThe version of the process consuming CPU and memory resources
arcwinprocess_MemoryMbThe amount of memory being consumed by the process in Mb
arcwinprocess_CpuPercentThe percentage of the CPU being consumed by the process
arcwinprocess_ArcDatetimeUtcThe UTC date / time the consumption date was collected

Microsoft 365/M365 scanning

The M365 scan or M365 scan collects user information, information about Office products in a subscription, mailboxes, equivalent of exchange online, and information about mobile devices connected to Exchange online.

NameDescription
M365Mailboxes_GuidMicrosoft 365 subscription ID
M365Mailboxes_ExchangeGuidMicrosoft 365 Exchange mailbox GUID
M365Mailboxes_DisplayNameMicrosoft 365 mailbox: Display name
M365Mailboxes_DeliverToMailboxAndForwardMicrosoft 365 mailbox: The deliver to mailbox address, and forwarding address if used
M365Mailboxes_LitigationHoldEnabledMicrosoft 365 mailbox: Litigation hold enabled
M365Mailboxes_LitigationHoldDateMicrosoft 365 mailbox: Litigation hold start date
M365Mailboxes_LitigationHoldDurationMicrosoft 365 mailbox: Litigation hold duration
M365Mailboxes_RetentionPolicyMicrosoft 365 mailbox: Retention policy applied to the mailbox
M365Mailboxes_RetentionHoldEnabledMicrosoft 365 mailbox: Retention hold enabled
M365Mailboxes_ExchangeUserAccountControlMicrosoft 365 mailbox: Exchange mailbox user account control
M365Mailboxes_IsMailboxEnabledMicrosoft 365 mailbox: Is the mailbox enabled
M365Mailboxes_LanguagesMicrosoft 365 mailbox: Language
M365Mailboxes_IsResourceMicrosoft 365 mailbox: Is resource mailbox
M365Mailboxes_IsLinkedMicrosoft 365 mailbox: Is a linked mailbox
M365Mailboxes_IsSharedMicrosoft 365 mailbox: Is a shared mailbox
M365Mailboxes_IsRootPublicFolderMailboxMicrosoft 365 mailbox: Is a root public folder mailbox
M365Mailboxes_ResetPasswordOnNextLogonMicrosoft 365 mailbox: Password must be reset at next logon
M365Mailboxes_ResourceTypeMicrosoft 365 mailbox: Resource type
M365Mailboxes_RoomMailboxAccountEnabledMicrosoft 365 mailbox: Room account enabled
M365Mailboxes_UserPrincipalNameMicrosoft 365 mailbox: User principal name
M365Mailboxes_UMEnabledMicrosoft 365 mailbox: Is the mailbox enabled for Unified Messaging
M365Mailboxes_WindowsLiveIDMicrosoft 365 mailbox: Windows Live ID
M365Mailboxes_MicrosoftOnlineServicesIDMicrosoft 365 mailbox: Microsoft Online Services ID
M365Mailboxes_WhenMailboxCreatedMicrosoft 365 mailbox: When created
M365Mailboxes_UsageLocationMicrosoft 365 mailbox: Usage location
M365Mailboxes_IsInactiveMailboxMicrosoft 365 mailbox: Is inactive
M365Mailboxes_AccountDisabledMicrosoft 365 mailbox: Account is disabled
M365Mailboxes_IsDirSyncedMicrosoft 365 mailbox: Account is synchronized with a on-premises Active Directory domain
M365Mailboxes_AliasMicrosoft 365 mailbox: Account alias
M365Mailboxes_GrantSendOnBehalfToMicrosoft 365 mailbox: user with right to send messages from the mailbox on behalf of the owner
M365Mailboxes_HiddenFromAddressListsEnabledMicrosoft 365 mailbox: Is the mailbox hidden from address list
M365Mailboxes_PrimarySmtpAddressMicrosoft 365 mailbox: user primary SMTP email address
M365Mailboxes_RecipientTypeDetailsMicrosoft 365 mailbox: Mailbox recipient type. For example: user mailbox
M365Mailboxes_WindowsEmailAddressMicrosoft 365 mailbox: Windows email address
M365Mailboxes_IdentityMicrosoft 365 mailbox: User identity
M365Mailboxes_IsValidMicrosoft 365 mailbox: Is the mailbox valid
M365Mailboxes_NameMicrosoft 365 mailbox user name
M365Mailboxes_WhenChangedUTCMicrosoft 365 mailbox: When last changed
M365Mailboxes_WhenCreatedUTCMicrosoft 365 mailbox: When created
M365Mailboxes_IdMicrosoft 365 mailbox: user ID
M365MailboxStatistics_OwnerADGuidMicrosoft 365 subscription ID
M365MailboxStatistics_MailboxGuidMicrosoft 365 mailbox: The mailbox GUID
M365MailboxStatistics_DisplayNameMicrosoft 365 mailbox: Display name
M365MailboxStatistics_ItemCountMicrosoft 365 mailbox: The number of items in the mailbox account
M365MailboxStatistics_DeletedItemCountMicrosoft 365 mailbox: The number of deleted items in the mailbox account
M365MailboxStatistics_TotalItemSizeMicrosoft 365 mailbox: The size of the items in the mailbox account
M365MailboxStatistics_TotalDeletedItemSizeMicrosoft 365 mailbox: The size of the deleted items in the mailbox account
M365MailboxStatistics_LastLogoffTimeMicrosoft 365 mailbox: The last time the mailbox was logged off
M365MailboxStatistics_LastLogonTimeMicrosoft 365 mailbox: The last time the mailbox was logged into
M365MailboxStatistics_MailboxTypeMicrosoft 365 mailbox: Mailbox type. For example: user mailbox
M365MailboxStatistics_MailboxTypeDetailMicrosoft 365 mailbox: Mailbox type details
M365MailboxStatistics_IsDatabaseCopyActiveMicrosoft 365 mailbox: Is the database copy active
M365MailboxStatistics_IsQuarantinedMicrosoft 365 mailbox: Is the mailbox quarantined
M365MailboxStatistics_IsArchiveMailboxMicrosoft 365 mailbox: Is the mailbox archived
M365MailboxStatistics_IsMoveDestinationMicrosoft 365 mailbox: Move destination
M365MailboxStatistics_IsValidMicrosoft 365 mailbox: Is the mailbox valid?
M365MobileDevices_GuidMicrosoft 365 mobile device: The Microsoft 365 Exchange mailbox GUID that the ActiveSync device connects to
M365MobileDevices_DisplayNameMicrosoft 365 mobile device: The ActiveSync devices name. For example: iPhone 6 Plus
M365MobileDevices_IdentityMicrosoft 365 mobile device: The ActiveSync devices Microsoft 365 identity. For example: Andrew Ireland\ExchangeActiveSyncDevices\iPhone
M365MobileDevices_DeviceIdMicrosoft 365 mobile device: The ActiveSync devices ID
M365MobileDevices_DeviceTypeMicrosoft 365 mobile device: Type of device used to synchronize with M365 Exchange Server
M365MobileDevices_FriendlyNameMicrosoft 365 mobile device: The ActiveSync devices name. For example: iPhone 6 Plus
M365MobileDevices_DeviceModelMicrosoft 365 mobile device: The ActiveSync devices model. For example: iPhone
M365MobileDevices_DeviceUserAgentMicrosoft 365 mobile device: The ActiveSync devices agent. For example: Apple-iPhone
M365MobileDevices_DeviceOSMicrosoft 365 mobile device: The ActiveSync devices operating system. For example: iOS 10.2
M365MobileDevices_DeviceOSLanguageMicrosoft 365 mobile device: The ActiveSync devices operating system language. For example: en-US
M365MobileDevices_IsManagedMicrosoft 365 mobile device: Is the device managed by Exchange
M365MobileDevices_DeviceAccessStateMicrosoft 365 mobile device: Is the device allowed to synchronize with the mailbox
M365MobileDevices_IsCompliantMicrosoft 365 mobile device: Is the device compliant with the M365 ActiveSync policies
M365MobileDevices_IsDisabledMicrosoft 365 mobile device: Has the ActiveSync relationship been disabled
M365MobileDevices_FirstSyncTimeMicrosoft 365 mobile device: The first time a user ActiveSync device synchronized with Microsoft 365 Exchange Server
M365MobileDevices_ClientTypeMicrosoft 365 mobile device: The protocol the device uses to connect to M365. For example: EAS
M365MobileDevices_IsValidMicrosoft 365 mobile device: Is the device valid?
M365user_UidThe user ID in Microsoft 365
M365user_DisplayNameThe user display name. For example: Andrew Ireland
M365user_FirstNameThe user first name. For example: Andrew
M365user_LastNameThe user last name. For example: Ireland
M365user_SignInNameThe email address with which the user signs into Microsoft 365.
M365user_UserPrincipalNameThe user principal name, typically the same as their sign in name
M365user_PreferredLanguageThe user preferred language
M365user_LicensesThe M365 subscription(s) assigned to the user
M365user_TitleThe user job title
M365user_DepartmentIf used, specifies the user department. For example: Finance
M365user_CompanyThe user company
M365user_CityThe user city
M365user_StateThe user state
M365user_CountryThe user country as selected in Microsoft 365
M365user_UserTypeThe type of user account. For example: member
M365user_SoftDeletionTimestampIf present, represents the date the account was marked for deletion
M365user_StrongPasswordRequiredDoes the account require a strong password
M365user_UsageLocationThe user country of usage. For example: US
M365user_LastPasswordChangeTimestampThe date the user last reset their password
M365user_PasswordNeverExpiresIf true then the user password is set to never expire
M365user_PasswordResetNotRequiredDuringActivateIf set then the user password is not required when activating a subscription
M365user_IsLicensedHas the user been assigned a license to access M365
M365user_ValidationStatusThe account validation state. For example: Healthy
M365user_WhenCreatedThe date the user account was created

Windows vCenter Server/vCenter Server Appliance

The following datapoints are collected when a user initiates a WindowsvCenter Server scan or vCenter Server Appliance scan. These data points are also collected when we run an inventory scan on a Hyper-V Server, System Center VMM server, or on a XenServer.

VM configuration (cluster/host/guest)

NameDescription
VirtualGuest_ClusterNameThe physical host cluster the virtual guest resides in
VirtualGuest_HostNameThe physical host the virtual guest currently resides on
VirtualGuest_GuestUUIDThe virtual guests Universally Unique Identifier
VirtualGuest_GuestUUID_LinkThe virtual guests serial number
VirtualGuest_GuestNameThe virtual guests display name
VirtualGuest_GuestDNSName of the virtual guest as registered in DNS
VirtualGuest_StateThe virtual guests current state. For example: Powered On
VirtualGuest_MemoryThe amount of memory currently assigned to the virtual guest
VirtualGuest_VirtualCPUThe number of virtual CPUs currently assigned to the virtual guest
VirtualGuest_GuestOSThe virtual guests operating system as selected on the physical host
VirtualGuest_DescriptionThe virtual guests description as entered on the physical host
VirtualGuest_HostCountThe number of physical hosts the virtual guest has run on within the past 30 days
VirtualHost_HostNameThe physical hypervisor hosts name
VirtualHost_ClusterNameThe cluster the physical hypervisor host resides in
VirtualHost_CPUModelThe physical hypervisor hosts CPU model. For example: Intel Xeon X5675 @ 3.07GHz
VirtualHost_CPUsThe number of processors installed in the physical hypervisor host
VirtualHost_TotalCoresThe number of cores installed in the physical hypervisor host
VirtualHost_TotalThreadsThe total number of processing threads available on the physical host
VirtualHost_HyperThreadingHas hyper threading been enabled on the physical host
VirtualHost_VmotionEnabledDoes the physical hypervisor host vmotion enabled
VirtualHost_SupportsLiveMigrationDoes the physical hypervisor host support live migrations
VirtualHost_OperatingSystemThe physical hypervisor hosts operating system. For example: VMware ESXi 6.0.0 build-3620759
VirtualHost_ClusterNodeStatusThe current status of the node in the cluster
VirtualHost_Memoryhe total amount of memory installed in the physical hypervisor host
VirtualMovement_GuestNameThe virtual guests display name
VirtualMovement_DNSNameName of the virtual guest as registered in DNS
VirtualMovement_ClusterNameThe physical host cluster the virtual guest resides in
VirtualMovement_GuestUUIDThe virtual guests Universally Unique Identifier
VirtualMovement_CurrentHostThe physical host the virtual guest moved from
VirtualMovement_TargetHostThe physical host the virtual guest moved to
VirtualMovement_MigrationCompletedThe date/time the virtual guest moved from the source host to the target host
VirtualMovement_EventTypeThe migration event type. For example: vim.event.VmMigratedEvent
VirtualMovement_CmdletNameThe cmdlet triggering the migration event. For example: Move-SCVirtualMachine
VirtualNetwork_ClusterNameThe physical host cluster the virtual guest resides in
VirtualNetwork_HostNameThe physical host the virtual guest currently resides on
VirtualNetwork_GuestNameThe virtual guests display name
VirtualNetwork_GuestUUIDThe virtual guests Universally Unique Identifier
VirtualNetwork_MACAddressThe virtual guests MAC address
VirtualNetwork_IPAddressThe virtual guests IP address(es) NOTE: Not considered External PII because this IP address is specific to servers not workstations.
VirtualNetwork_IPSubnetThe virtual guests IP subnet
VirtualPowerEvent_EventTimestampThe date/time the virtual guest was powered on / off
VirtualPowerEvent_PowerDateThe date/time the virtual guest was powered on / off
VirtualPowerEvent_GuestNameThe virtual guests display name
VirtualPowerEvent_GuestUUIDThe virtual guests Universally Unique Identifier
VirtualPowerEvent_HostNameThe physical host the virtual guest was on when the power on/off event occurred
VirtualPowerEvent_EventThe type of event. For example: vim.event.DrsVmPoweredOnEvent
VirtualPowerEvent_CmdletNameThe cmdlet triggering the powered on/off event. For example: Start-SCVirtualMachine
VirtualPowerEvent_ClusterNameThe physical host cluster the virtual guest resides in
VirtualVersion_VersionThe version of the hypervisor technology managing the virtual guest. For example: VirtualCenter Database 6.0
VirtualVersion_LatestActivityDateThe date of the last activity to occur in the hypervisor management database

Linux inventory scan

The following datapoints are collected when a user initiates a Linux inventory scan.

(Video) Learn How To Use Data Mapping to Map Data From Forms To Tables [GREAT FOR VBA BEGINNERS]

Software Asset Management (SAM)

NameDescription
SAMDatabase_DataSourceThe frontend Windows Server a SQL Server DSN record was found on
SAMDatabase_DBServerThe SQL Server the DSN record is pointing to
SAMDatabase_DBNameThe database housing the technology the DSN record is pointing to
SAMDatabase_DBTypeThe technology the DSN record relates to. For example: SCCM
SAMDatabase_VersionThe version of technology the DSN SAMGeo_City - The name of the city the ISP provider returned for the device
SAMGeo_CountryThe name of the country the ISP provider returned for the device
SAMGeo_CountryCodeThe country code the ISP provider returned for the device
SAMGeo_LatitudeThe latitude the ISP provider returned for the device
SAMGeo_LongitudeThe longitude the ISP provider returned for the device
SAMHDD_PhysicalDriveThe devices physical storage drive type. For example: SCSI Disk Device
SAMHDD_LogicalDriveLetterThe devices logical drive letter
SAMHDD_LogicalDriveNameThe devices logical drive name
SAMHDD_FileSystemThe devices storage file system. For example: NTFS
SAMHDD_TotalSizeThe total size of the devices drive
SAMHDD_FreeSizeThe remaining space on the devices drive
SAMMSAppsFound_MSAppTypeMicrosoft product(s) installed on the device
SAMMSAppsFound_EditionThe edition of the Microsoft product(s) installed
SAMMSAppsFound_ProductVerThe version of the Microsoft product(s) installed
SAMNetwork_MACAddressThe MAC address for each network card installed in the device
SAMNetwork_IPAddressThe IP address for each network card installed in the device
SAMNetwork_SubnetMaskThe subnet mask for each network card installed in the device
SAMOSActivation_ActivationStringHow and if the devices Windows operating system was activated
SAMServices_NameThe name of the services (and processes) installed on Windows Server and (Linux) devices
SAMServices_StateThe state of each service when scanned
SAMServices_CreationDateThe date each service was created on the device
SAMServices_SvcPathThe services install path
SAMSoftware_RegistryKeyThe installed product's registry key
SAMSoftware_InstallDateThe installed product's installation date
SAMSoftware_VersionThe installed product's version
SAMSoftware_PublisherThe installed product's publisher
SAMSoftware_DisplayNameThe installed products display name
SAMSoftware_LastRunDateThe date the installed product was last run
SAMSoftwareLastUse_CaptionThe name of the Microsoft product
SAMSoftwareLastUse_VersionThe version of the Microsoft product
SAMSoftwareLastUse_LastUseThe date the Microsoft product or component was last used
SAMSoftwareLastUse_InstallStateThe Microsoft product's installation state
SAMSoftwareLastUse_IsInstalledIs the Microsoft product installed
SAMSoftwareLastUse_UserThe login name of the last user of the device
SAMSoftwareLastUse_UserDomainThe domain the last user of the device is a member of
SAMSQLAG_InstanceThe SQL Server instance name
SAMSQLAG_ClusterThe SQL cluster name if the instance is clustered
SAMSQLAG_DatabaseThe SQL database the availability group setting applies toSAMSQLAG_SyncState - The database's synchronization state. For example: SYNCHRONIZED
SAMSQLAG_AvailabilityGroupThe SQL availably group name
SAMSQLAG_PrimaryReplicaThe primary replica of the SQL database
SAMSQLAG_PrimaryRecoveryHealthThe state of the primary replica. For example: ONLINE
SAMSQLAG_RoleThe SQL Servers role in the availability group. For example: PRIMARY
SAMSQLAG_SyncHealthThe availably groups synchronization health. For example: HEALTHY
SAMSQLAG_PrimaryAllowConnDoes the primary replica allow connections. For example: YES
SAMSQLAG_SecondaryAllowConnDo the secondary replicas all connections. For example: READ_ONLY
SAMSQL-Alias_AliasThe SQL Servers alias if one has been specified
SAMSQL-Alias_ActualThe SQL Servers FQDN and the port number SQL is using. For example: SCCMSQL.IO.PRIV,1433
SAMSQL-BIFeatures_InstanceThe SQL Server instance name
SAMSQL-BIFeatures_ClusterThe SQL cluster name if the instance is clustered
SAMSQL-BIFeatures_VersionThe full SQL Server version. For example: 11.3.6020.0
SAMSQL-BIFeatures_EditionThe SQL instance edition. For example: Enterprise
SAMSQL-BIFeatures_FeaturesThe SQL business intelligence features installed in the instance. For example: Analysis_Server_Full=3
SAMSQL-BIFeatures_ComponentThe SQL business intelligence component installed in the instance. For example: AS
SAMSQL-CPU_InstanceThe SQL Server instance name
SAMSQL-CPU_ClusterThe SQL cluster name if the instance is clustered
SAMSQL-CPU_LogicalCPUsThe number of logical CPUs visible to the SQL Server
SAMSQL-CPU_HTRatioThe hyper threading ratio. For example: 1
SAMSQL-CPU_SQLCPUThe number of CPUs visible to the SQL Server
SAMSQL-DB_InstanceThe SQL Server instance name
SAMSQL-DB_ClusterThe SQL cluster name if the instance is clustered
SAMSQL-DB_DatabaseThe SQL database name
SAMSQLServerDatabases_SystemDBIs the SQL database a system database
SAMSQL-DB_StateThe SQL database state. For example: ONLINE
SAMSQL-DB_DateThe date the SQL database was created
SAMSQL-DB_DbSizeThe SQL database data size
SAMSQL-DB_LogSizeThe SQL database log size
SQLDBsReceived_DatabaseThe name of the SQL database queried by Movere. For example: vCenter
SQLDBsReceived_LatestActivityDateThe date of the last activity to occur in the SQL database
SAMSQL-Hist_InstanceThe SQL Server instance name
SAMSQL-Hist_ClusterThe SQL cluster name if the instance is clustered
SAMSQL-Hist_AvgReadsThe total number of reads performed since last reboot divided by the number of days since last reboot
SAMSQL-Hist_AvgWritesThe total number of writes performed since last reboot divided by the number of days since last reboot
SAMSQL-Hist_AvgConnectionsThe total number of connections to the SQL Server since last reboot divided by the number of days since last reboot
SAMSQL-Hist_UptimeDaysThe number of days since the SQL Server was last rebooted
SAMSQL-LS_InstanceThe SQL Server instance name
SAMSQL-LS_ClusterThe SQL cluster name if the instance is clustered
SAMSQL-LS_PrimaryServerThe primary SQL Server in the log shipping configuration
SAMSQL-LS_PrimaryDatabaseThe primary database in the log shipping configuration
SAMSQL-LS_SecondaryServerThe secondary SQL Server in the log shipping configuration
SAMSQL-LS_SecondaryDatabaseThe secondary database in the log shipping configuration
SAMSQL-MR_InstanceThe SQL Server instance name
SAMSQL-MR_ClusterThe SQL cluster name if the instance is clustered
SAMSQL-MR_DatabaseThe SQL database being mirrored
SAMSQL-MR_StateThe state of the synchronization. For example: SYNCHRONIZED
SAMSQL-MR_RoleThe SQL Servers role in a mirrored configuration. For example: PRINCIPAL
SAMSQL-MR_PartnerThe SQL Servers partner in the mirrored configuration
SAMSQL-MR_WitnessThe SQL Server witness in the mirrored configuration
SAMSQLServerInstances_InstanceThe SQL Server instance name
SAMSQLServerInstances_PortThe port number the SQL instance is using. For example: 1433
SAMSQLServerInstances_ClusterThe SQL cluster name if the instance is clustered
SAMSQLServerInstances_AllNodesIf clustered, the SQL nodes in the cluster
SAMSQLServerInstances_ActiveNodeIf clustered, the active SQL node in the cluster
SAMSQLServerInstances_VersionThe SQL Server instance version. For example: 2016
SAMSQLServerInstances_FullVersionThe SQL Server instance full version. For example: 13.0.1601.5
SAMSQLServerInstances_EditionThe SQL instance edition. For example: Enterprise
SAMSQLServerInstances_DBCountThe number of databases in the SQL instance
SAMSQLServerInstances_LogShippingIn the SQL instance participating in a log shipping configuration
SAMSQLServerInstances_MirroringIn the SQL instance participating in a mirroring configuration
SAMSQLServerInstances_AVGroupIn the SQL instance participating in a SQL availability group configuration
SAMSQLServerServices_InstanceThe SQL service instance name
SAMSQLServerServices_TypeThe SQL service type. For example: Reporting Service
SAMSQLServerServices_StateThe SQL service state. For example: Running
SAMSQLServerServices_CreationDateThe date the SQL service was created on the device
SAMSQLServerServices_PathThe path the SQL service was created in
SAMSQL-Ver_InstanceThe SQL Server instance name
SAMSQL-Ver_ClusterThe SQL cluster name if the instance is clustered
SAMSQL-Ver_VersionThe full SQL Server version. For example: 11.3.6020.0
SAMSQL-Ver_EditionThe SQL instance edition. For example: Enterprise
SAMSQL-Ver_PortThe port number the SQL instance is using. For example: 1433
SAMSQL-Ver_ActiveNodeIf clustered, the active SQL node in the cluster
SAMSQL-Ver_AllNodesIf clustered, the SQL nodes in the cluster
SAMSystem_FQDNThe devices fully qualified domain name
SAMSystem_OSThe devices operating system
SAMSystem_NetBIOSThe devices NetBIOS name
SAMSystem_PIDThe devices operating system product ID
SAMSystem_OSActivationMethodHow and if the devices Windows operating system was activated
SAMSystem_SerialNoThe devices serial number
SAMSystem_UUIDThe devices Universally Unique Identifier
SAMSystem_RegOrgThe organization the device is registered to
SAMSystem_RegUserThe user the device is registered to
SAMSystem_MakeThe devices make. For example: Hewlett-Packard
SAMSystem_ModelThe devices model. For example: HP Pavilion dv5
SAMSystem_Domainhe Active Directory domain the device resides in
SAMSystem_TotalRAMThe total amount of RAM installed in the device
SAMSystem_AvailableRAMThe amount of unused RAM installed in the device when it was last inventoried
SAMSystem_CPUModelThe devices CPU model. For example: Intel Core2 Duo T9400 @ 2.53GHz
SAMSystem_CPUCountThe number of processors installed in the device
SAMSystem_CPUCoresThe number of cores installed in the device
SAMSystem_LastUserThe last user of the device before it was last inventoried
SAMSystem_LastUserDomainThe domain the last user of the device belongs to
SAMSystem_Is 64 BitSystems processor architecture
SAMSystem_Service PackWindows service pack installed on the system (if applicable)
SAMSystem_Boot TimeLast time the Windows system was started
SAMSystem_ScanDateThe date the device was last inventoried
SAMSystem_SWLinesThe number of software title entries retrieved from the device when last inventoried
SAMSystem_SWFlagsProduct titles found on the device that require follow up. For example: Exchange
SAMSystem_PrefUserThe primary user of the device based upon the highest number of login per user
SAMSystem_PrefUserDomainThe domain the primary user of the device is a member of
SAMSystem_OriginalCPUModelThe raw CPU model returned including legal symbols and additional spacing. For example: Intel(R) Core(TM)2 Duo CPU T9400 @ 2.53GHz
SAMUser_UserNameUser names connected to the device
SAMUser_UserDomainThe domain the user(s) who have connected to the device are a member of
SAMUser_ConnectionMethodThe type of connect each user has made to the device. For example: Interactive
SAMUser_LogonDateTimeThe date/time the connection was made
SAMUser_TotalMinsThe total number of minutes connected
SAMUser_TotalLogonsThe total number of logons
SAMVersion_LatestActivityDateThe last time the device was successfully inventoried

Linux actual resource consumption scan

The following data is collect when a user performs a Linux actual resource consumption scan.

Linux disk information

NameDescription
arclinuxdisk_ReadMbPerSecisk reads in Mb per second
arclinuxdisk_WriteMbPerSecDisk writes in Mb per second
arclinuxdisk_KbPerTransferThe size of the data moved to disk in Kb per transfer
arclinuxdisk_DiskUsePercentTotal disk use percentage
arclinuxdisk_ArcDatetimeUtche UTC date / time the consumption date was collected.

Linux netstat information

NameDescription
arclinuxnetstat_LocalAddressThe local IP address of the netstat connection NOTE: Not considered External PII because this IP address is specific to servers not workstations.
arclinuxnetstat_ForeignAddresshe foreign address of the netstat connection NOTE: Considered External PII because connections will include both servers and workstations.
arclinuxnetstat_LocalPortThe port number the local address is using
arclinuxnetstat_ForeignPortThe port number the foreign address is using
arclinuxnetstat_StateThe state of the connection when the scan was performed
arclinuxnetstat_ProcessNameThe name of the process being connected to and its install path
arclinuxnetstat_ArcDatetimeUtcThe UTC date / time the consumption date was collected.

Linux network information

NameDescription
arclinuxnetwork_SendMbPerSecThe amount of data sent from the d evice in Mb per second since the previous scan
arclinuxnetwork_ReceiveMbPerSecThe amount of data received by the device in Mb per second since the previous scan
arclinuxnetwork_TotalMbSentThe total amount of data sent from the device in Mb
arclinuxnetwork_TotalMbReceivedThe total amount of data received by the device in Mb
arclinuxnetwork_ArcDatetimeUtcThe UTC date / time the consumption date was collected.

Linux process information

NameDescription
arclinuxprocess_ProcessNameThe name of the process consuming CPU and memory resources
arclinuxprocess_ProcessPathhe install path of the process consuming CPU and memory resources
arclinuxprocess_MemoryMbThe amount of memory being consumed by the process in Mb
arclinuxprocess_CpuPercentThe percentage of the CPU being consumed by the process
arclinuxprocess_ArcDatetimeUtcThe UTC date / time the consumption date was collected.

Next steps

Review resource consumption data views.

Videos

1. The Journey to Cloud-Native: Growing While Tackling Technical Debt – Connect Europe 2018
(Couchbase)
2. GMT20210503 161027 Recording 1920x1080
(DmitriKilin)
3. Breaking Point | Critical Role | Campaign 3, Episode 31
(Critical Role)
4. CHEM364 2020 lecture42
(DmitriKilin)
5. [SGP-2022] Deep Learning on Point Clouds
(SU Lab UC San Diego)
6. UE4 4.24 Super Quick LIDAR point cloud data import!
(The Unreal Takeaway)
Top Articles
Latest Posts
Article information

Author: Sen. Emmett Berge

Last Updated: 24/06/2023

Views: 5345

Rating: 5 / 5 (80 voted)

Reviews: 87% of readers found this page helpful

Author information

Name: Sen. Emmett Berge

Birthday: 1993-06-17

Address: 787 Elvis Divide, Port Brice, OH 24507-6802

Phone: +9779049645255

Job: Senior Healthcare Specialist

Hobby: Cycling, Model building, Kitesurfing, Origami, Lapidary, Dance, Basketball

Introduction: My name is Sen. Emmett Berge, I am a funny, vast, charming, courageous, enthusiastic, jolly, famous person who loves writing and wants to share my knowledge and understanding with you.