Information collected during scanning
This article provides a summary of information that's collected during Movere scanning.
Active Directory scanning
The following data is collect during an Active Directory scan.
Device information
| Datapoint Name | Description |
|---|---|
| device_FQDN | Fully qualified domain name of the device e.g. 'SQLSERVER1.IO.PRIV' |
| device_DN | The devices distinguished name e.g. 'CN=DC1,OU=Domain Controllers,DC=io,DC=priv in Active Directory' |
| device_Domain | The Active Directory domain the device resides in e.g. 'IO.PRIV' |
| device_dNSHostName | Name of the device as registered in DNS e.g. 'SQLSERVER1.IO.PRIV' |
| device_userAccountControl | Flags that control the behavior of each device account in Active Directory e.g. Domain Controller = 532480 |
| device_sAMAccountName | Devices samAccountName in Active Directory e.g. 'SQLSERVER1' |
| device_operatingSystem | Device operating system as registered in Active Directory e.g. Windows Server 2003 |
| device_LogonCount | A count of the number of times each device has logged into the queried domain controller, attribute has an upper limit of 65535 |
| device_lastLogon | The date/time the device last logged into the Active Directory domain |
| device_pwdLastSet | The date/time the device last changed its password in the Active Directory domain |
| device_whenCreated | The date/time the device was joined to the Active Directory domain |
| device_Description | The devices description in Active Directory |
Domain information
| Name | Description |
|---|---|
| domain_ShortName | The Active Directory domains short name e.g. 'io' |
| domain_LongName | The domain's long name e.g. 'io.priv' |
| domain_DN | The domains distinguished name in Active Directory e.g. 'DC=IO,DC=PRIV' |
| domain_maxPwdAge | The maximum number of days a password must be reset within to remain active in the domain |
| domain_whenCreated | The date/time the Active Directory domain was created |
| domain_whenChanged | The date a change last occurred in the domain e.g. when the password with a trusted domain was reset |
System Center Configuration Manager information
This information is collected if the environment has System Center Configuration Manager.
| Name | Description |
|---|---|
| SCCM_DN | The distinguished name for each SCCM site server in Active Directory e.g. 'CN=SMS-MP-UL1-SCCMMGR.IO.PRIV,CN=System Management,CN=System,DC=io,DC=priv' |
| SCCM_cn | SCCM site servers Common Name in Active Directory |
| SCCM_Domain | The Active Directory domain the SCCM site server resides in |
| SCCM_dNSHostName | SCCM site servers DNS host name in Active Directory |
| SCCM_whenCreated | The date/time the SCCM site server object was created in Active Directory |
| SCCM_mSSMSSiteCode | The SCCM site code for the SCCM site server e.g. 'UL1' |
Trust information
| Name | Description |
|---|---|
| trust_DN | A trusted domains distinguished name in Active Directory e.g. 'CN=US.MOVERE.IO,CN=System,DC=MOVERE,DC=IO' |
| trust_cn | A trusted Active Directory domains Common Name e.g. 'CN=US.MOVERE.IO' |
| trust_Direction | One-way or two-way |
| trust_Partner | The Active Directory domain the selected domain either trusts or is trusted by e.g. 'MOVERE.IO' |
| trust_Type | Active Directory domain trust type e.g. Transitive |
| trust_ShortName | A trusted Active Directory domains short name e.g. 'US' |
| trust_whenCreated | The date/time when the Active Directory domain trust was created |
| trust_whenChanged | The date/time a change last occurred to a domain trust e.g. when the trust password was reset |
User information
By default Movere collects user information. However, you can indicate that no user information should be collected, by specifying the -nouser command when you run a scan from the command line. Learn more.
| Name | Description |
|---|---|
| user_DN | The users distinguished name e.g. 'CN=Andrew Ireland,CN=Users,DC=io,DC=priv in Active Directory' |
| user_name | Users full name in Active Directory e.g. 'Andrew Ireland' |
| user_cn | Users common name in Active Directory e.g. 'Andrew Ireland' |
| user_description | The users description in Active Directory |
| user_displayName | The users display name in Active Directory e.g. 'Andrew Ireland' |
| user_userAccountControl | Flags that control the behavior of each user account in Active Directory e.g. Standard User = 512 |
| user_sAMAccountName | Users logon name in Active Directory e.g. 'aireland' |
| user_sn | Users last name e.g. 'Ireland' |
| user_mail | Users email address e.g. 'aireland@movere.io' |
| user_msExchHomeServerName | Exchange Server currently housing the users Exchange mailbox |
| user_givenName | Users first name e.g. 'Andrew' |
| user_co | If used, specifies the users country/region e.g. 'United States' |
| user_title | If used, represents the users job title e.g. 'Manager' |
| user_department | If used, specifies the users department e.g. 'Finance' |
| user_company | If used, represents the users company e.g. 'Movere' |
| user_whenCreated | The date/time the user was added to the Active Directory domain |
| user_accountExpires | If used, represents the date the users account will be disabled and prohibit access to the Active Directory domain |
| user_LogonCount | A count of the number of times each user object has logged into the queried domain controller, attribute has an upper limit of 65535 |
| user_employeeid | If used, represents the users employee ID |
| user_employeeNumber | If used, represents the users employee number |
| user_employeeType | If used, represents the users employee type e.g. staff, vendor, contractor, temp, consultant etc. |
| user_lastlogon | The date/time a user last logged into Active Directory. This is a replicated timestamp that is accurate to within a week of the extraction date |
| user_pwdlastset | The date/time the user last reset their password in the Active Directory domain |
| user_domain | The Active Directory domain the user is a member of |
Windows scanning
The following datapoints are collected when initiating a Windows inventory scan.
CRM user information
| Name | Description |
|---|---|
| crmuser_DataStore | Microsoft SQL Server housing the Dynamics CRM database |
| crmuser_OrganizationName | The Dynamics CRM organization name the user is a member of |
| crmuser_FullName | The users full name as it appears in Dynamics CRM |
| crmuser_EmailAddress | The users email address as it appears in Dynamics CRM |
| crmuser_DomainUser | The Dynamics CRM users domain login name |
| crmuser_DomainName | The Active Directory domain the Dynamics CRM user is a member of |
| crmuser_CreatedOn | The date/time the Dynamics CRM user account was created |
| crmuser_AccountDisabled | Identifies user accounts that have been disabled in Dynamics CRM |
| crmuser_AccessLevel | Dynamics CRM user access level e.g. Administrative, Read-Only, Read-Write |
| crmuser_CALType | Dynamics CRM CAL type e.g. Administrative, Basic, Enterprise, Professional, Essential |
| crmversion_Version | Dynamics CRM Server version |
| crmversion_LatestActivityDate | The date data was last written to the CRM SQL database |
Exchange Server information
| Name | Description |
|---|---|
| exchange activesync_FirstSyncTime | The first time a user's ActiveSync device synchronized with an on-prem Exchange Server |
| exchange activesync_LastSuccessSync | The last time a user's ActiveSync device successfully synchronized with an on-prem Exchange Server |
| exchange activesync_DeviceType | Type of device used to synchronize with an on-prem Exchange Server |
| exchange activesync_DeviceID | The ActiveSync devices ID |
| exchange activesync_DeviceUserAgent | The ActiveSync devices agent e.g. Apple-iPhone |
| exchange activesync_DeviceModel | The ActiveSync devices model e.g. iPhone |
| exchange activesync_DeviceFriendlyName | The ActiveSync devices name e.g. iPhone 6 Plus |
| exchange activesync_DeviceOS | The ActiveSync devices operating system e.g. iOS 10.2 |
| exchange activesync_Identity | The ActiveSync devices Exchange identity e.g. io. priv/Users/Andrew Ireland/ExchangeActiveSyncDevices/iPhone |
| exchange activesync_DevicePolicyApplied | The Exchange ActiveSync policy applied to the ActiveSync device |
| exchange activesync_MailboxGuid | The Exchange mailbox GUID the ActiveSync device connects to |
| exchange activesyncpolicy_DeviceEncryptionEnabled | ActiveSync device encryption policy setting |
| exchange activesyncpolicy_AllowStorageCard | ActiveSync device storage card policy setting |
| exchange activesyncpolicy_AllowCamera | ActiveSync device camera policy setting |
| exchange activesyncpolicy_RequireDeviceEncryption | ActiveSync device encryption requirement policy setting |
| exchange activesyncpolicy_AllowUnsignedApplications | ActiveSync device unsigned applications policy setting |
| exchange activesyncpolicy_AllowUnsignedInstallationPackages | ActiveSync device unsigned installation packages policy setting |
| exchange activesyncpolicy_AllowWiFi | ActiveSync device Wifi policy setting |
| exchange activesyncpolicy_AllowTextMessaging | ActiveSync device text messaging policy setting |
| exchange activesyncpolicy_AllowPOPIMAPEmail | ActiveSync device POP-IMAP email policy setting |
| exchange activesyncpolicy_AllowIrDA | ActiveSync device IrDA policy setting |
| exchange activesyncpolicy_RequireManualSyncWhenRoaming | ActiveSync device roaming sync policy setting |
| exchange activesyncpolicy_AllowDesktopSync | ActiveSync device desktop sync policy setting |
| exchange activesyncpolicy_AllowBrowser | ActiveSync device browser policy setting |
| exchange activesyncpolicy_AllowConsumerEmail | ActiveSync device consumer email policy setting |
| exchange activesyncpolicy_AllowRemoteDesktop | ActiveSync device remote desktop policy setting |
| exchange activesyncpolicy_AllowInternetSharing | ActiveSync device Internet sharing policy setting |
| exchange activesyncpolicy_AllowBluetooth | ActiveSync device Bluetooth policy setting |
| exchange activesyncpolicy_Identity | ActiveSync policy ID |
| exchange activesyncpolicy_Guid | ActiveSync policy GUID |
| exchange activesyncpolicy_WhenChanged | When the ActiveSync policy was last changed |
| exchange activesyncpolicy_WhenCreated | When the ActiveSync policy was created |
| exchange activesyncpolicy_Name | ActiveSync policy name |
| exchange activesyncpolicy_IsValid | ActiveSync policy's validity |
| exchange activesyncpolicy_IsDefault | ActiveSync policy's priority |
| exchange activesyncpolicy_IsDefaultPolicy | ActiveSync policy's global priority |
| CASMailbox_PrimarySmtpAddress | Users primary SMTP email address |
| CASMailbox_SamAccountName | Users logon name |
| CASMailbox_ServerName | Exchange Server currently housing the users Exchange mailbox |
| CASMailbox_DisplayName | The users display name e.g. Andrew Ireland |
| CASMailbox_ActiveSyncMailboxPolicy | Exchange ActiveSync policy applied to the mailbox |
| CASMailbox_ActiveSyncMailboxPolicyIsDefaulted | Exchange ActiveSync default policy applied to the mailbox |
| CASMailbox_ActiveSyncEnabled | Exchange ActiveSync enabled on the mailbox |
| CASMailbox_HasActiveSyncDevicePartnership | An ActiveSync relationship to the mailbox exists |
| CASMailbox_OWAEnabled | The mailbox is enabled for Outlook Web Access |
| CASMailbox_Identity | The mailbox identity e.g. io.priv/Users/Andrew Ireland |
| CASMailbox_IsValid | The mailbox's validity |
| CASMailbox_Guid | The Exchange mailbox's GUID |
| CASMailbox_WhenCreated | The date the mailbox was created |
| ExchangeCluster_Name | Exchange cluster name |
| ExchangeCluster_Servers | Exchange cluster members |
| ExchangeCluster_WitnessServer | Exchange cluster witness server |
| ExchangeCluster_Identity | Exchange cluster name |
| ExchangeCluster_WhenCreated | The date the Exchange cluster was created |
| ExchangeDlpPolicy_Name | Exchange Data Loss Prevention (DLP) policy name |
| ExchangeDlpPolicy_State | Exchange Data Loss Prevention (DLP) policy state e.g. Enabled |
| ExchangeDlpPolicy_Mode | Exchange Data Loss Prevention (DLP) policy mode e.g. Audit |
| ExchangeDlpPolicy_Description | Exchange Data Loss Prevention (DLP) policy description |
| ExchangeDlpPolicy_IsValid | Exchange Data Loss Prevention (DLP) policy's validity |
| ExchangeDlpPolicy_WhenChanged | Exchange Data Loss Prevention (DLP) policy's last changed date |
| ExchangeServer_Name | Exchange Server name |
| ExchangeServer_Domain | The Active Directory domain the Exchange Server resides in |
| ExchangeServer_Edition | Exchange Server edition |
| ExchangeServer_Fqdn | Exchange Server fully qualified domain name |
| ExchangeServer_IsHubTransportServer | Is the Exchange Server a hub transport server |
| ExchangeServer_IsClientAccessServer | Is the Exchange Server a client access server |
| ExchangeServer_IsEdgeServer | Is the Exchange Server an edge server |
| ExchangeServer_IsMailboxServer | Is the Exchange Server a mailbox server |
| ExchangeServer_IsUnifiedMessagingServer | Is the Exchange Server a unified messaging server |
| ExchangeServer_Identity | The Exchange Servers NetBIOS name |
| ExchangeServer_IsValid | The Exchange Servers validity |
| ExchangeServer_AdminDisplayVersion | The Exchange Servers admin console version |
| ExchangeServer_WhenCreated | When the Exchange Server was created |
| ExchangeServer_IsExchangeTrialEdition | Is the Exchange Server a trial installation |
| ExchangeServer_IsExpiredExchangeTrialEdition | Has the Exchange Server trial period expired |
| ExchangeServer_RemainingTrialPeriod | Number of remaining days left to trial the Exchange Server |
| ExchangeJournalRule_Recipient | Exchange journal recipient |
| ExchangeJournalRule_Scope | Exchange journal scope |
| ExchangeJournalRule_Enabled | Exchange journal rule enabled |
| ExchangeJournalRule_Name | Exchange journal rule name |
| ExchangeJournalRule_IsValid | Exchange journal rules validity |
| ExchangeJournalRule_WhenChanged | Exchange journal rules last change date |
| ExchangeMailbox_Database | Exchange Server database name |
| ExchangeMailbox_ExchangeGuid | Exchange mailbox GUID |
| ExchangeMailbox_ExchangeUserAccountControl | Exchange mailbox User Account Control value |
| ExchangeMailbox_ForwardingAddress | Forwarding address(es) assigned to the mailbox |
| ExchangeMailbox_IsMailboxEnabled | Is the mailbox enabled |
| ExchangeMailbox_IsResource | Is a resource mailbox |
| ExchangeMailbox_IsLinked | Is a linked mailbox |
| ExchangeMailbox_IsShared | Is a shared mailbox |
| ExchangeMailbox_SamAccountName | Users logon name |
| ExchangeMailbox_ServerName | The Exchange Server the mailbox resides on |
| ExchangeMailbox_UMEnabled | Is the mailbox enabled for Unified Messaging |
| ExchangeMailbox_HiddenFromAddressListsEnabled | Is the mailbox hidden from the address list |
| ExchangeMailbox_MaxSendSize | Maximum email size that can be sent from the mailbox |
| ExchangeMailbox_MaxReceiveSize | Maximum email size that can be received from the mailbox |
| ExchangeMailbox_ExchangeVersion | Version of the Exchange Server the mailbox resides on |
| ExchangeMailbox_RecipientType | Mailbox recipient type e.g. user mailbox |
| ExchangeMailbox_RecipientTypeDetails | Mailbox recipient type details |
| ExchangeMailbox_WindowsEmailAddress | The mailboxes email address |
| ExchangeMailbox_Identity | The mailbox identity e.g. io.priv/Users/Andrew Ireland |
| ExchangeMailbox_Guid | The Exchange mailbox's GUID |
| ExchangeMailbox_WhenCreated | The date the mailbox was created |
| ExchangeMailbox_IsValid | Is the mailbox valid |
| ExchangeMailbox_ArchiveDatabase | The mailboxes archive database |
| ExchangeMailbox_ArchiveName | The mailboxes archive name |
| ExchangeMailbox_ArchiveStatus | The mailboxes archive status |
| ExchangeMailbox_RetentionPolicy | Retention policy applied to the mailbox |
| ExchangeMailbox_InPlaceHolds | In place holds applied to the mailbox |
| ExchangeMBSearch_Name | he name of the mailbox search policy name |
| ExchangeMBSearch_CreatedBy | User account used to create the mailbox search policy |
| ExchangeMBSearch_sourcemailboxes | Mailbox(es) searched to place items on hold |
| ExchangeMBSearch_Status | Search status e.g. not started |
| ExchangeMBSearch_ItemHoldPeriod | The period of time search items will remain on hold |
| ExchangeMBSearch_LastModifiedTime | The last time the search policy was changed |
| ExchangeMBSearch_IsValid | Is the search policy valid |
| ExchangeMBSearch_InPlaceHoldEnabled | Has the in place hold policy been enabled |
| ExchangeMBSearch_InPlaceHoldIdentity | The in place hold policy unique ID |
| ExchangeMBStatistics_DeletedItemCount | The number of deleted items in the mailbox account |
| ExchangeMBStatistics_ItemCount | The number of items in the mailbox account |
| ExchangeMBStatistics_LastLogonTime | The last time the mailbox was logged into |
| ExchangeMBStatistics_MailboxGuid | The mailbox's GUID |
| ExchangeMBStatistics_StorageLimitStatus | The mailboxes storage limit status |
| ExchangeMBStatistics_TotalDeletedItemSize | The size of the deleted items in the mailbox account |
| ExchangeMBStatistics_TotalItemSize | The size of the items in the mailbox account |
| ExchangeMBStatistics_IsValid | Is the mailbox valid |
| ExchangeRetentionPolicy_Name | The retention policy name |
| ExchangeRetentionPolicy_Identity | The retention policy's unique ID |
| ExchangeRetentionPolicy_WhenChanged | When the retention policy was last changed |
| ExchangeRetentionPolicy_WhenCreated | When the retention policy was created |
| ExchangeRetentionPolicy_IsValid | Is the retention policy valid |
| ExchangeRetentionPolicy_RetentionPolicyTagLinks | Retention policy tags e.g. Never Delete |
| ExchangeRetentionTags_MessageClassDisplayName | Message class name e.g. All Mailbox Content |
| ExchangeRetentionTags_RetentionEnabled | Has the retention policy been enabled |
| ExchangeRetentionTags_RetentionAction | Retention action setting e.g. DeleteAndAllowRecovery |
| ExchangeRetentionTags_AgeLimitForRetention | Age limit for retention e.g. 30 days |
| ExchangeRetentionTags_TriggerForRetention | Trigger for retention e.g. WhenDelivered |
| ExchangeRetentionTags_JournalingEnabled | Has journaling been enabled |
| ExchangeRetentionTags_RTType | Retention type e.g. Personal |
| ExchangeRetentionTags_Comment | Comments applied to the retention tag |
| ExchangeRetentionTags_Name | Retention tag name e.g. 1 Month Delete |
| ExchangeRetentionTags_Identity | Retention tag identity e.g. 1 Month Delete |
| ExchangeRetentionTags_WhenChanged | When the retention tag was last changed |
| ExchangeRetentionTags_WhenCreated | When the retention tag was created |
| ExchangeRetentionTags_IsValid | Is the retention tag valid |
| ExchangeVersion_Version | Exchange Server version |
| ExchangeVersion_LatestActivityDate | The last time activity occurred on the Exchange server |
##Lync or Skype for Business information Name | Description --- | --- LyncArchive_Description | Lync/Skype archive policy description LyncArchive_ArchiveInternal | Is the archive internal e.g. TRUE LyncArchive_ArchiveExternal | Is the archive external e.g. FALSE LyncArchive_ScopeClass | The archive's scope e.g. GLOBAL LyncArchive_Identity | The archives identity e.g. GLOBAL LyncConf_AllowIPAudio | Lync/Skype conference policy: Allow IP audio LyncConf_AllowIPVideo | Lync/Skype conference policy: Allow IP video LyncConf_Description | Lync/Skype conference policy description LyncConf_AllowParticipantControl | Lync/Skype conference policy: Allow participant control LyncConf_AllowAnnotations | Lync/Skype conference policy: allow Annotations LyncConf_DisablePowerPointAnnotations | Lync/Skype conference policy: Disable PowerPoint annotations LyncConf_AllowUserToScheduleMeetingsWithAppSharing | Lync/Skype conference policy: Allow user to schedule meetings with application sharing LyncConf_AllowAnonymousUsersToDialOut | Lync/Skype conference policy: Allow anonymous users to dial out LyncConf_AllowAnonymousParticipantsInMeetings | Lync/Skype conference policy: Allow anonymous participants in meetings LyncConf_AllowExternalUsersToSaveContent | Lync/Skype conference policy: Allow external users to save content LyncConf_AllowExternalUserControl | Lync/Skype conference policy: Allow external user control LyncConf_AllowExternalUsersToRecordMeeting | Lync/Skype conference policy: Allow external users to record meeting LyncConf_AllowPolls | Lync/Skype conference policy: Allow polls LyncConf_EnableDialInConferencing | Lync/Skype conference policy: Enable dial in conferencing LyncConf_EnableAppDesktopSharing | Lync/Skype conference policy: Enable application desktop sharing LyncConf_AllowConferenceRecording | Lync/Skype conference policy: Allow conference recording LyncConf_EnableP2PRecording | Lync/Skype conference policy: Enable peer-to-peer recording LyncConf_EnableFileTransfer | Lync/Skype conference policy: Enable file transfer LyncConf_EnableP2PFileTransfer | Lync/Skype conference policy: Enable peer-to-peer file transfer LyncConf_EnableP2PVideo | Lync/Skype conference policy: Enable peer-to-peer video LyncConf_EnableDataCollaboration | Lync/Skype conference policy: Enable data collaboration LyncConf_MaxVideoConferenceResolution | Lync/Skype conference policy: Maximum video conference resolution LyncConf_MaxMeetingSize | Lync/Skype conference policy: Maximum meeting size LyncConf_AudioBitRateKb | Lync/Skype conference policy: Audio bit rate in kilobits LyncConf_VideoBitRateKb | Lync/Skype conference policy: Video bit rate in kilobits LyncConf_AppSharingBitRateKb | Lync/Skype conference policy: Application sharing bit rate in kilobits LyncConf_FileTransferBitRateKb | Lync/Skype conference policy: File transfer bit rate in kilobits LyncConf_ScopeClass | Lync/Skype conference policy scope class e.g. Global LyncConf_Identity | Lync/Skype conference policy: Identity e.g. Global LyncExternal_Description | Lync/Skype external policy description LyncExternal_EnableFederationAccess | Lync/Skype external policy: Enable federation access LyncExternal_EnablePublicCloudAccess | Lync/Skype external policy: Enable public cloud access LyncExternal_EnablePublicCloudAudioVideoAccess | Lync/Skype external policy: Enable public cloud audio video access LyncExternal_EnableOutsideAccess | Lync/Skype external policy: Enable outside access LyncExternal_ScopeClass | Lync/Skype external policy scope class e.g. Global LyncExternal_Identity | Lync/Skype external policy: Identity e.g. Global LyncMobility_Description | Lync/Skype mobility policy description LyncMobility_EnableOutsideVoice | Lync/Skype mobility policy: Enable outside voice LyncMobility_EnableMobility | Lync/Skype mobility policy: Enable mobility LyncMobility_ScopeClass | Lync/Skype mobility policy scope class e.g. Global LyncMobility_Identity | Lync/Skype mobility policy: Identity e.g. Global LyncServer_Site | Lync/Skype site name LyncServer_FQDN | Lync/Skype server fully qualified domain name LyncServer_Identity | Lync/Skype server device name LyncServer_Services | Lync/Skype server service(s) e.g. Central Management Database LyncServer_Computers | Lync/Skype site servers LyncUser_SamAccountName | Lync/Skype user: samAccountName in Active Directory LyncUser_UserPrincipalName | Lync/Skype users email address LyncUser_AudioVideoDisabled | Lync/Skype user: Audio video disabled LyncUser_IPPBXSoftPhoneRoutingEnabled | Lync/Skype user: IP PBX soft phone routing enabled LyncUser_RemoteCallControlTelephonyEnabled | Lync/Skype user: Remote call control telephony enabled LyncUser_HostedVoiceMail | Lync/Skype user: Hosted voicemail LyncUser_EnabledForFederation | Lync/Skype user: Enabled for federation LyncUser_EnabledForInternetAccess | Lync/Skype user: Enabled for Internet access LyncUser_PublicNetworkEnabled | Lync/Skype user: Public network enabled LyncUser_EnterpriseVoiceEnabled | Lync/Skype user: Enterprise voice enabled LyncUser_EnabledForRichPresence | Lync/Skype user: Enabled for rich presence LyncUser_SipAddress | Lync/Skype user: Sip address LyncUser_Enabled | Lync/Skype user: State LyncUser_TargetRegistrarPool | Lync/Skype user: Target registrar pool LyncUser_VoicePolicy | Lync/Skype user: Voice policy assigned LyncUser_MobilityPolicy | Lync/Skype user: Mobility policy assigned LyncUser_ConferencingPolicy | Lync/Skype user: Conferencing policy assigned LyncUser_RegistrarPool | Lync/Skype user: Registrar pool LyncUser_ArchivingPolicy | Lync/Skype user: Archiving policy assigned LyncUser_ExternalAccessPolicy | Lync/Skype user: External access policy assigned LyncUser_Guid | Lync/Skype user: GUID LyncUser_WhenCreated | Lync/Skype user: When created LyncUser_IsValid | Lync/Skype user: Is the account valid LyncUserLastLogon_Guid | Lync/Skype user: GUID LyncUserLastLogon_LastNewRegisterTime | Lync/Skype user: Last logon timestamp LyncVersion_Version | Lync/Skype Server version LyncVersion_LatestActivityDate | The last time activity occurred on the Lync/Skype server LyncVoice_Identity | Lync/Skype voice policy: Identity e.g. Global LyncVoice_Description | Lync/Skype voice policy description LyncVoice_AllowSimulRing | Lync/Skype voice policy: Allow simultaneous ring LyncVoice_AllowCallForwarding Lync/Skype voice policy: Allow all forwarding LyncVoice_AllowPSTNReRouting Lync/Skype voice policy: Allow PSTN re-routing LyncVoice_Name Lync/Skype voice policy name LyncVoice_DefaultPolicy Lync/Skype voice policy: Is this the default policy LyncVoice_EnableDelegation Lync/Skype voice policy: Enable delegation LyncVoice_EnableTeamCall Lync/Skype voice policy: Enable team all LyncVoice_EnableCallTransfer Lync/Skype voice policy: Enable call transfer LyncVoice_EnableCallPark Lync/Skype voice policy: Enable call park LyncVoice_EnableMaliciousCallTracing Lync/Skype voice policy: Enable malicious call tracing LyncVoice_EnableBWPolicyOverride Lync/Skype voice policy: Enable bandwidth policy override LyncVoice_PreventPSTNTollBypass Lync/Skype voice policy: Prevent PSTN toll bypass
### SharePoint Server / User / Configuration information
Datapoint Name Description
SharePointFarm_ConfigDB SQL Server the SharePoint farm is storing it's data in SharePointFarm_MaxOSVersion The highest operating system version the SharePoint farm runs on e.g. 2012 SharePointFarm_MaxSPVersion The highest SharePoint version in the SharePoint farm e.g. 2016 SharePointFarm_MaxSPEdition The highest SharePoint edition in the SharePoint farm e.g. Enterprise SharePointFarmPS_ConfigDB SQL Server the Project Server stores it's data in SharePointFarmPS_MaxOSVersion The highest operating system version the Project Server runs on e.g. 2012 SharePointFarmPS_MaxSPVersion The highest SharePoint version the Project Server runs on e.g. 2016 SharePointFarmPS_MaxSPEdition The SharePoint edition the Project Server is running on e.g. Enterprise (Project Server only runs on SharePoint Enterprise) SharePointFeatures_SiteId The SharePoint sites Site ID SharePointFeatures_WebId The SharePoint sites Web ID SharePointFeatures_FeatureId Are SharePoint Enterprise features enabled SharePointFeatures_TimeActivated The date SharePoint Enterprise features were enabled on the site SharePointMembers_WebId The SharePoint sites Web ID SharePointMembers_UserId The SharePoint users site specific ID SharePointMembers_SiteId The SharePoint sites Site ID SharePointMembers_tp_Login The SharePoint users login name SharePointMembers_tp_Type The SharePoint users connection type SharePointMembers_tp_Domain The domain the SharePoint user is a member of SharePointMembers_tp_Title The SharePoint users display name SharePointSites_WebId The SharePoint sites Web ID SharePointSites_SiteId The SharePoint sites Site ID SharePointSites_ParentId The SharePoint sites Parent ID SharePointSites_Edition Are SharePoint Enterprise features enabled SharePointSites_Members Does the SharePoint site has its own members list SharePointSites_FullURL The full URL address for the SharePoint site e.g. http://sharepoint/sites/IO SharePointSites_WebTitle The SharePoint sites display name e.g. IO SharePoint SharePointSites_TimeCreated The date the SharePoint site was created SharePointSites_RequestAccessEmail The user to email to request access to the SharePoint site SharePointSites_bEntByParenting Is there an Enterprise feature enabled child site utilizing this sites membership list SharePointSiteVersions_SiteId The SharePoint Servers Site ID SharePointSiteVersions_VersionId The SharePoint Servers version ID SharePointSiteVersions_Version The SharePoint Servers version e.g. 15.0.2.0 SharePointSiteVersions_MOSS/WSS The SharePoint Servers feature set i.e. full install versus foundation only SharePointUserList_tp_SiteId The SharePoint sites Site ID SharePointUserList_tp_Id The SharePoint users site specific ID SharePointUserList_tp_Login The SharePoint users login name SharePointUserList_tp_Type The SharePoint users connection type SharePointUserList_tp_Domain The domain the SharePoint user is a member of SharePointUserList_tp_Title The SharePoint users display name SharePointUserList_Last_Accessed The date the user last accessed the SharePoint site SharePointVersion_Version The SharePoint Servers version e.g. 16.0.6.0 SharePointVersion_LatestActivityDate The date of the last activity to occur in the SharePoint Servers SQL configuration database
### SAM information
Datapoint Name Description
SAMWinHotFix_Caption Windows hotfix title e.g. KB3200970 SAMWinHotFix_Description Web link to the Windows hotfix e.g. https://support.microsoft.com/?kbid=3200970 SAMWinHotFix_HotFix ID Windows hotfix type e.g. Security Update SAMWinFeatures_ID Windows feature identifier SAMWinFeatures_Parent ID Windows feature parent identifier SAMWinFeatures_Caption Windows feature title e.g. IIS Management Console SAMWinProcess_Process Name Windows process name e.g. CcmExec SAMWinProcess_File Path Windows process path e.g. C:\Windows\CCM\CcmExec.exe SAMWinProcess_Product Name Windows product name e.g. System Center Configuration Manager SAMWinProcess_Product Version Windows product version e.g. 5.00.8412.1000 SAMWinProcess_Company Name Products publisher e.g. Microsoft Corporation SAMWinProcess_File Description Processes description e.g. Host Process for Microsoft Configuration Manager SAMWinProcess_Legal Copyright Copyright details e.g. Copyright (C) Microsoft Corporation. All rights reserved. SAMWinProcess_Legal Trademarks Trademarks e.g. Microsoft SQL Server is a registered trademark of Microsoft Corporation. SAMWinProcess_Comments Process comments e.g. Citrix XenServer Windows Guest Agent SAMIISSites_Site Name IIS site name e.g. Movere.Qlik.Api SAMIISSites_Bindings Bindings details e.g. [https] *:443: SAMIISSites_Auto Start Auto start enabled SAMIISSites_State Site state e.g. Started SAMIISSites_App Path IIS app path e.g. /SMS_MP SAMIISSites_App Pool Name IIS app pool name e.g. SMS Management Point Pool SAMIISSites_App Virtual Path IIS app virtual path e.g. /_wpresources SAMIISSites_App Physical Path IIS app physical path e.g. C:\Program Files\SMS_CCM\SMS_MP SAMIISSites_Web Config Found IIS app configuration found SAMIISAppPools_App Pool Name IIS app pool name e.g. MSExchangeMapiMailboxAppPool SAMIISAppPools_Managed Runtime Version Version e.g. v4.0 SAMIISAppPools_Managed Pipeline Mode Pipeline mode e.g. Integrated SAMIISAppPools_State IIS app pool state e.g. Started SAMIISAppPools_Enable 32 Bit Is 32 bit enabled SAMIISAppPools_Identity App pool identity e.g. LocalSystem SAMIISAppPools_Worker Process IDs Process identifier SAMDotNetComponents_File Path Component file path e.g. C:\Program Files\Microsoft SQL Server\120\DTS\Binn SAMDotNetComponents_File Name Component file name e.g. ISServerExec.exe SAMDotNetComponents_File Version Component file version e.g. 12.0.2000.8 ((SQL14_RTM).140220-1752) SAMDotNetComponents_Product Name Product that component is part of e.g. Microsoft SQL Server SAMDotNetComponents_Product Version Product version e.g. 12.0.2000.8 SAMDotNetComponents_Copyright Copyright details e.g. Microsoft Corp. All rights reserved. SAMDotNetComponents_Company Products publisher e.g. Microsoft Corporation SAMDotNetComponents_Description Component description e.g. SSIS Execution Process SAMDotNetComponents_Date Modified Date modified SAMDotNetConfigFiles_File Path Component configuration file path e.g. C:\Program Files\Microsoft SQL Server\120\DTS\Binn SAMDotNetConfigFiles_File Name Component configuration file name e.g. MsDtsSrvr.exe.config SAMDotNetConfigFiles_App Setings Key Count Key Count SAMDotNetConfigFiles_App Settings Secrets Found Secrets Found SAMDotNetConfigFiles_App Settings Key Names Key Names SAMDotNetConfigFiles_Dot Net Version .Net version e.g. 4.6.2 SAMDotNetConnectionStrings_File Path .Net connection string e.g. C:\Program Files\SMS_CCM\EnrollmentPoint SAMDotNetConnectionStrings_Connection String Name .Net connection string name e.g. Default SAMDotNetConnectionStrings_Server Name Connection server e.g. SCCMSQL.io.priv SAMDotNetConnectionStrings_Database Name Database name e.g. CM_UL1 SAMDotNetConnectionStrings_Provider Name Provider name e.g. System.Data.SqlClient SAMDotNetConnectionStrings_Is Secure Connection is secure
### System center DPM information
Datapoint Name Description SysCntDPMManaged_FQDN The fully qualified domain name of the device being backed up by DPM SysCntDPMManaged_BackupState The state of the last backup performed e.g. Succeeded SysCntDPMManaged_CompletionDate The date the last backup was performed SysCntDPMVersion_Version The DPM Servers version e.g. 5.0.158.0 SysCntDPMVersion_LatestActivityDate The date of the last activity to occur in the DPM SQL database SysCntOMManaged_FQDN The fully qualified domain name of the device being monitored by SCOM SysCntOMManaged_GroupName The group the device belongs to in SCOM e.g. All Windows Computers SysCntOMManaged_IsDeleted_OM Has the device been deleted from SCOM SysCntOMManaged_LastModified When were the SCOM configuration applied to the device last modified SysCntOMVersion_Version The SCOM Servers version e.g. 7.2.11719.0 SysCntOMVersion_LatestActivityDate The date of the last activity to occur in the SCOM SQL database
## Scan Office 365
The following datapoints are collected when a user initiates an Office 365 scan.
### Office 365/ M365 information
The O365 scan or M365 scan collects user's information, information about office products in our subscription such as excel, word, mailboxes, equivalent of exchange online, and information about mobile devices connected to exchange online such OS information.
Datapoint Name Description O365Mailboxes_Guid Office 365 subscription ID O365Mailboxes_ExchangeGuid Office 365 Exchange mailbox GUID O365Mailboxes_DisplayName Office 365 mailbox: Display name O365Mailboxes_DeliverToMailboxAndForward Office 365 mailbox: The deliver to mailbox address, and forwarding address if used O365Mailboxes_LitigationHoldEnabled Office 365 mailbox: Litigation hold enabled O365Mailboxes_LitigationHoldDate Office 365 mailbox: Litigation hold start date O365Mailboxes_LitigationHoldDuration Office 365 mailbox: Litigation hold duration O365Mailboxes_RetentionPolicy Office 365 mailbox: Retention policy applied to the mailbox O365Mailboxes_RetentionHoldEnabled Office 365 mailbox: Retention hold enabled O365Mailboxes_ExchangeUserAccountControl Office 365 mailbox: Exchange mailbox user account control O365Mailboxes_IsMailboxEnabled Office 365 mailbox: Is the mailbox enabled O365Mailboxes_Languages Office 365 mailbox: Language O365Mailboxes_IsResource Office 365 mailbox: Is resource mailbox O365Mailboxes_IsLinked Office 365 mailbox: Is a linked mailbox O365Mailboxes_IsShared Office 365 mailbox: Is a shared mailbox O365Mailboxes_IsRootPublicFolderMailbox Office 365 mailbox: Is a root public folder mailbox O365Mailboxes_ResetPasswordOnNextLogon Office 365 mailbox: Password must be reset at next logon O365Mailboxes_ResourceType Office 365 mailbox: Resource type O365Mailboxes_RoomMailboxAccountEnabled Office 365 mailbox: Room account enabled O365Mailboxes_UserPrincipalName Office 365 mailbox: User principal name O365Mailboxes_UMEnabled Office 365 mailbox: Is the mailbox enabled for Unified Messaging O365Mailboxes_WindowsLiveID Office 365 mailbox: Windows Live ID O365Mailboxes_MicrosoftOnlineServicesID Office 365 mailbox: Microsoft Online Services ID O365Mailboxes_WhenMailboxCreated Office 365 mailbox: When created O365Mailboxes_UsageLocation Office 365 mailbox: Usage location O365Mailboxes_IsInactiveMailbox Office 365 mailbox: Is inactive O365Mailboxes_AccountDisabled Office 365 mailbox: Account is disabled O365Mailboxes_IsDirSynced Office 365 mailbox: Account is synchronized with a on-prem Active Directory domain O365Mailboxes_Alias Office 365 mailbox: Account alias O365Mailboxes_GrantSendOnBehalfTo Office 365 mailbox: Users with right to send messages from the mailbox on behalf of the owner O365Mailboxes_HiddenFromAddressListsEnabled Office 365 mailbox: Is the mailbox hidden from address list O365Mailboxes_PrimarySmtpAddress Office 365 mailbox: Users primary SMTP email address O365Mailboxes_RecipientTypeDetails Office 365 mailbox: Mailbox recipient type e.g. user mailbox O365Mailboxes_WindowsEmailAddress Office 365 mailbox: Windows email address O365Mailboxes_Identity Office 365 mailbox: User identity O365Mailboxes_IsValid Office 365 mailbox: Is the mailbox valid O365Mailboxes_Name Office 365 mailbox user name O365Mailboxes_WhenChangedUTC Office 365 mailbox: When last changed O365Mailboxes_WhenCreatedUTC Office 365 mailbox: When created O365Mailboxes_Id Office 365 mailbox: Users ID O365MailboxStatistics_OwnerADGuid Office 365 subscription ID O365MailboxStatistics_MailboxGuid Office 365 mailbox: The mailbox's GUID O365MailboxStatistics_DisplayName Office 365 mailbox: Display name O365MailboxStatistics_ItemCount Office 365 mailbox: The number of items in the mailbox account O365MailboxStatistics_DeletedItemCount Office 365 mailbox: The number of deleted items in the mailbox account O365MailboxStatistics_TotalItemSize Office 365 mailbox: The size of the items in the mailbox account O365MailboxStatistics_TotalDeletedItemSize Office 365 mailbox: The size of the deleted items in the mailbox account O365MailboxStatistics_LastLogoffTime Office 365 mailbox: The last time the mailbox was logged off O365MailboxStatistics_LastLogonTime Office 365 mailbox: The last time the mailbox was logged into O365MailboxStatistics_MailboxType Office 365 mailbox: Mailbox type e.g. user mailbox O365MailboxStatistics_MailboxTypeDetail Office 365 mailbox: Mailbox type details O365MailboxStatistics_IsDatabaseCopyActive Office 365 mailbox: Is the database copy active O365MailboxStatistics_IsQuarantined Office 365 mailbox: Is the mailbox quarantined O365MailboxStatistics_IsArchiveMailbox Office 365 mailbox: Is the mailbox archived O365MailboxStatistics_IsMoveDestination Office 365 mailbox: Move destination O365MailboxStatistics_IsValid Office 365 mailbox: Is the mailbox valid O365MobileDevices_Guid Office 365 mobile device: The Office 365 Exchange mailbox GUID the ActiveSync device connects to O365MobileDevices_DisplayName Office 365 mobile device: The ActiveSync devices name e.g. iPhone 6 Plus O365MobileDevices_Identity Office 365 mobile device: The ActiveSync devices Office 365 identity e.g. Andrew Ireland\ExchangeActiveSyncDevices\iPhone O365MobileDevices_DeviceId Office 365 mobile device: The ActiveSync devices ID O365MobileDevices_DeviceType Office 365 mobile device: Type of device used to synchronize with O365 Exchange Server O365MobileDevices_FriendlyName Office 365 mobile device: The ActiveSync devices name e.g. iPhone 6 Plus O365MobileDevices_DeviceModel Office 365 mobile device: The ActiveSync devices model e.g. iPhone O365MobileDevices_DeviceUserAgent Office 365 mobile device: The ActiveSync devices agent e.g. Apple-iPhone O365MobileDevices_DeviceOS Office 365 mobile device: The ActiveSync devices operating system e.g. iOS 10.2 O365MobileDevices_DeviceOSLanguage Office 365 mobile device: The ActiveSync devices operating system language e.g. en-US O365MobileDevices_IsManaged Office 365 mobile device: Is the device managed by Exchange O365MobileDevices_DeviceAccessState Office 365 mobile device: Is the device allowed to synchronize with the mailbox O365MobileDevices_IsCompliant Office 365 mobile device: Is the device compliant with the O365 ActiveSync policies O365MobileDevices_IsDisabled Office 365 mobile device: Has the ActiveSync relationship been disabled O365MobileDevices_FirstSyncTime Office 365 mobile device: The first time a users ActiveSync device synchronized with Office 365 Exchange Server O365MobileDevices_ClientType Office 365 mobile device: The protocol the device uses to connect to O365 e.g. EAS O365MobileDevices_IsValid Office 365 mobile device: Is the device valid O365Users_Uid The users ID in Office 365 O365Users_DisplayName The users display name e.g. Andrew Ireland O365Users_FirstName The users first name e.g. Andrew O365Users_LastName The users last name e.g. Ireland O365Users_SignInName The email address the user signs into Office 365 with O365Users_UserPrincipalName The users principal name, typically the same as their sign in name O365Users_PreferredLanguage The users preferred language O365Users_Licenses The O365 subscription(s) assigned to the user O365Users_Title The users job title O365Users_Department If used, specifies the users department e.g. Finance O365Users_Company The users company O365Users_City The users city O365Users_State The users state O365Users_Country The users country/region as selected in Office 365 O365Users_UserType The type of user account e.g. member O365Users_SoftDeletionTimestamp If present, represents the date the account was marked for deletion O365Users_StrongPasswordRequired Does the account require a strong password O365Users_UsageLocation The users country/region of usage e.g. US O365Users_LastPasswordChangeTimestamp The date the user last reset their password O365Users_PasswordNeverExpires If true then the users password is set to never expire O365Users_PasswordResetNotRequiredDuringActivate If set then the users password is not required when activating a subscription O365Users_IsLicensed Has the user been assigned a license to access O365 O365Users_ValidationStatus The account validation state e.g. Healthy O365Users_WhenCreated The date the users account was created
Windows and Linux inventory scan
The following datapoints are collected when a user initiates a Windows inventory scan or Linux inventory scan or both.
### SAM information
Datapoint Name Description
SAMDatabase_DataSource The frontend Windows Server a SQL Server DSN record was found on SAMDatabase_DBServer The SQL Server the DSN record is pointing to SAMDatabase_DBName The database housing the technology the DSN record is pointing to SAMDatabase_DBType The technology the DSN record relates to e.g. SCCM SAMDatabase_Version The version of technology the DSN record relates to e.g. 5.00.8412 SAMGeo_City The name of the city the ISP provider returned for the device SAMGeo_Country The name of the country the ISP provider returned for the device SAMGeo_CountryCode The country code the ISP provider returned for the device SAMGeo_Latitude The latitude the ISP provider returned for the device SAMGeo_Longitude The longitude the ISP provider returned for the device SAMHDD_PhysicalDrive The devices physical storage drive type e.g. SCSI Disk Device SAMHDD_LogicalDriveLetter The devices logical drive letter SAMHDD_LogicalDriveName The devices logical drive name SAMHDD_FileSystem The devices storage file system e.g. NTFS SAMHDD_TotalSize The total size of the devices drive SAMHDD_FreeSize The remaining space on the devices drive SAMMSAppsFound_MSAppType Microsoft product(s) installed on the device SAMMSAppsFound_Edition The edition of the Microsoft product(s) installed SAMMSAppsFound_ProductVer The version of the Microsoft product(s) installed SAMNetwork_MACAddress The MAC address for each network card installed in the device SAMNetwork_IPAddress The IP address for each network card installed in the device SAMNetwork_SubnetMask The subnet mask for each network card installed in the device SAMOSActivation_ActivationString How and if the devices Windows operating system was activated SAMServices_Name The name of the services (and processes) installed on Windows Server and (Linux) devices SAMServices_State The state of each service when scanned SAMServices_CreationDate The date each service was created on the device SAMServices_SvcPath The services install path SAMSoftware_RegistryKey The installed product's registry key SAMSoftware_InstallDate The installed product's installation date SAMSoftware_Version The installed product's version SAMSoftware_Publisher The installed product's publisher SAMSoftware_DisplayName The installed products display name SAMSoftware_LastRunDate The date the installed product was last run SAMSoftwareLastUse_Caption The name of the Microsoft product SAMSoftwareLastUse_Version The version of the Microsoft product SAMSoftwareLastUse_LastUse The date the Microsoft product or component was last used SAMSoftwareLastUse_InstallState The Microsoft product's installation state SAMSoftwareLastUse_IsInstalled Is the Microsoft product installed SAMSoftwareLastUse_User The login name of the last user of the device SAMSoftwareLastUse_UserDomain The domain the last user of the device is a member of SAMSQLAG_Instance The SQL Server instance name SAMSQLAG_Cluster The SQL cluster name if the instance is clustered SAMSQLAG_Database The SQL database the availability group setting applies to SAMSQLAG_SyncState The database's synchronization state e.g. SYNCHRONIZED SAMSQLAG_AvailabilityGroup The SQL availably group name SAMSQLAG_PrimaryReplica The primary replica of the SQL database SAMSQLAG_PrimaryRecoveryHealth The state of the primary replica e.g. ONLINE SAMSQLAG_Role The SQL Servers role in the availability group e.g. PRIMARY SAMSQLAG_SyncHealth The availably groups synchronization health e.g. HEALTHY SAMSQLAG_PrimaryAllowConn Does the primary replica allow connections e.g. YES SAMSQLAG_SecondaryAllowConn Do the secondary replicas all connections e.g. READ_ONLY SAMSQL-Alias_Alias The SQL Servers alias if one has been specified SAMSQL-Alias_Actual The SQL Servers FQDN and the port number SQL is using e.g. SCCMSQL.IO.PRIV,1433 SAMSQL-BIFeatures_Instance The SQL Server instance name SAMSQL-BIFeatures_Cluster The SQL cluster name if the instance is clustered SAMSQL-BIFeatures_Version The full SQL Server version e.g. 11.3.6020.0 SAMSQL-BIFeatures_Edition The SQL instance edition e.g. Enterprise SAMSQL-BIFeatures_Features The SQL business intelligence features installed in the instance e.g. Analysis_Server_Full=3 SAMSQL-BIFeatures_Component The SQL business intelligence component installed in the instance e.g. AS SAMSQL-CPU_Instance The SQL Server instance name SAMSQL-CPU_Cluster The SQL cluster name if the instance is clustered SAMSQL-CPU_LogicalCPUs The number of logical CPUs visible to the SQL Server SAMSQL-CPU_HTRatio The hyper threading ratio e.g. 1 SAMSQL-CPU_SQLCPU The number of CPUs visible to the SQL Server SAMSQL-DB_Instance The SQL Server instance name SAMSQL-DB_Cluster The SQL cluster name if the instance is clustered SAMSQL-DB_Database The SQL database name SAMSQLServerDatabases_SystemDB Is the SQL database a system database SAMSQL-DB_State The SQL database state e.g. ONLINE SAMSQL-DB_Date The date the SQL database was created SAMSQL-DB_DbSize The SQL database data size SAMSQL-DB_LogSize The SQL database log size SQLDBsReceived_Database The name of the SQL database queried by Movere e.g. vCenter SQLDBsReceived_LatestActivityDate The date of the last activity to occur in the SQL database SAMSQL-Hist_Instance The SQL Server instance name SAMSQL-Hist_Cluster The SQL cluster name if the instance is clustered SAMSQL-Hist_AvgReads The total number of reads performed since last reboot divided by the number of days since last reboot SAMSQL-Hist_AvgWrites The total number of writes performed since last reboot divided by the number of days since last reboot SAMSQL-Hist_AvgConnections The total number of connections to the SQL Server since last reboot divided by the number of days since last reboot SAMSQL-Hist_UptimeDays The number of days since the SQL Server was last rebooted SAMSQL-LS_Instance The SQL Server instance name SAMSQL-LS_Cluster The SQL cluster name if the instance is clustered SAMSQL-LS_PrimaryServer The primary SQL Server in the log shipping configuration SAMSQL-LS_PrimaryDatabase The primary database in the log shipping configuration SAMSQL-LS_SecondaryServer The secondary SQL Server in the log shipping configuration SAMSQL-LS_SecondaryDatabase The secondary database in the log shipping configuration SAMSQL-MR_Instance The SQL Server instance name SAMSQL-MR_Cluster The SQL cluster name if the instance is clustered SAMSQL-MR_Database The SQL database being mirrored SAMSQL-MR_State The state of the synchronization e.g. SYNCHRONIZED SAMSQL-MR_Role The SQL Servers role in a mirrored configuration e.g. PRINCIPAL SAMSQL-MR_Partner The SQL Servers partner in the mirrored configuration SAMSQL-MR_Witness The SQL Server witness in the mirrored configuration SAMSQLServerInstances_Instance The SQL Server instance name SAMSQLServerInstances_Port The port number the SQL instance is using e.g. 1433 SAMSQLServerInstances_Cluster The SQL cluster name if the instance is clustered SAMSQLServerInstances_AllNodes If clustered, the SQL nodes in the cluster SAMSQLServerInstances_ActiveNode If clustered, the active SQL node in the cluster SAMSQLServerInstances_Version The SQL Server instance version e.g. 2016 SAMSQLServerInstances_FullVersion The SQL Server instance full version e.g. 13.0.1601.5 SAMSQLServerInstances_Edition The SQL instance edition e.g. Enterprise SAMSQLServerInstances_DBCount The number of databases in the SQL instance SAMSQLServerInstances_LogShipping In the SQL instance participating in a log shipping configuration SAMSQLServerInstances_Mirroring In the SQL instance participating in a mirroring configuration SAMSQLServerInstances_AVGroup In the SQL instance participating in a SQL availability group configuration SAMSQLServerServices_Instance The SQL service instance name SAMSQLServerServices_Type The SQL service type e.g. Reporting Service SAMSQLServerServices_State The SQL service state e.g. Running SAMSQLServerServices_CreationDate The date the SQL service was created on the device SAMSQLServerServices_Path The path the SQL service was created in SAMSQL-Ver_Instance The SQL Server instance name SAMSQL-Ver_Cluster The SQL cluster name if the instance is clustered SAMSQL-Ver_Version The full SQL Server version e.g. 11.3.6020.0 SAMSQL-Ver_Edition The SQL instance edition e.g. Enterprise SAMSQL-Ver_Port The port number the SQL instance is using e.g. 1433 SAMSQL-Ver_ActiveNode If clustered, the active SQL node in the cluster SAMSQL-Ver_AllNodes If clustered, the SQL nodes in the cluster SAMSystem_FQDN The devices fully qualified domain name SAMSystem_OS The devices operating system SAMSystem_NetBIOS The devices NetBIOS name SAMSystem_PID The devices operating system product ID SAMSystem_OSActivationMethod How and if the devices Windows operating system was activated SAMSystem_SerialNo The devices serial number SAMSystem_UUID The devices Universally Unique Identifier SAMSystem_RegOrg The organization the device is registered to SAMSystem_RegUser The user the device is registered to SAMSystem_Make The devices make e.g. Hewlett-Packard SAMSystem_Model The devices model e.g. HP Pavilion dv5 SAMSystem_Domain The Active Directory domain the device resides in SAMSystem_TotalRAM The total amount of RAM installed in the device SAMSystem_AvailableRAM The amount of unused RAM installed in the device when it was last inventoried SAMSystem_CPUModel The devices CPU model e.g. Intel Core2 Duo T9400 @ 2.53GHz SAMSystem_CPUCount The number of processors installed in the device SAMSystem_CPUCores The number of cores installed in the device SAMSystem_LastUser The last user of the device before it was last inventoried SAMSystem_LastUserDomain The domain the last user of the device belongs to SAMSystem_Is 64 Bit Systems processor architecture SAMSystem_Service Pack Windows service pack installed on the system (if applicable) SAMSystem_Boot Time Last time the Windows system was started SAMSystem_ScanDate The date the device was last inventoried SAMSystem_SWLines The number of software title entries retrieved from the device when last inventoried SAMSystem_SWFlags Product titles found on the device that require follow up e.g. Exchange SAMSystem_PrefUser The primary user of the device based upon the highest number of login per user SAMSystem_PrefUserDomain The domain the primary user of the device is a member of SAMSystem_OriginalCPUModel The raw CPU model returned including legal symbols and additional spacing e.g. Intel(R) Core(TM)2 Duo CPU T9400 @ 2.53GHz SAMUser_UserName The name(s) of the users who have connected to the device SAMUser_UserDomain The domain the user(s) who have connected to the device are a member of SAMUser_ConnectionMethod The type of connect each user has made to the device e.g. Interactive SAMUser_LogonDateTime The date/time the connection was made SAMUser_TotalMins The total number of minutes connected SAMUser_TotalLogons The total number of logons SAMVersion_LatestActivityDate The last time the device was successfully inventoried
Windows vCenter Server/ vCSA scan
The following datapoints are collected when a user initiates a Windows vCenter Server scan or vCSA scan. These datapoints are also collects when we inventory scan a Hyper-V Server or SCVMM Server OR a XenServer.
### Virtual Machine Configuration data (cluster/host/guest)
Datapoint Name Description
VirtualGuest_ClusterName The physical host cluster the virtual guest resides in VirtualGuest_HostName The physical host the virtual guest currently resides on VirtualGuest_GuestUUID The virtual guests Universally Unique Identifier VirtualGuest_GuestUUID_Link The virtual guests serial number VirtualGuest_GuestName The virtual guests display name VirtualGuest_GuestDNS Name of the virtual guest as registered in DNS VirtualGuest_State The virtual guests current state e.g. Powered On VirtualGuest_Memory The amount of memory currently assigned to the virtual guest VirtualGuest_VirtualCPU The number of virtual CPUs currently assigned to the virtual guest VirtualGuest_GuestOS The virtual guests operating system as selected on the physical host VirtualGuest_Description The virtual guests description as entered on the physical host VirtualGuest_HostCount The number of physical hosts the virtual guest has run on within the past 30 days VirtualHost_HostName The physical hypervisor hosts name VirtualHost_ClusterName The cluster the physical hypervisor host resides in VirtualHost_CPUModel The physical hypervisor hosts CPU model e.g. Intel Xeon X5675 @ 3.07GHz VirtualHost_CPUs The number of processors installed in the physical hypervisor host VirtualHost_TotalCores The number of cores installed in the physical hypervisor host VirtualHost_TotalThreads The total number of processing threads available on the physical host VirtualHost_HyperThreading Has hyper threading been enabled on the physical host VirtualHost_VmotionEnabled Does the physical hypervisor host vmotion enabled VirtualHost_SupportsLiveMigration Does the physical hypervisor host support live migrations VirtualHost_OperatingSystem The physical hypervisor hosts operating system e.g. VMware ESXi 6.0.0 build-3620759 VirtualHost_ClusterNodeStatus The current status of the node in the cluster VirtualHost_Memory The total amount of memory installed in the physical hypervisor host VirtualMovement_GuestName The virtual guests display name VirtualMovement_DNSName Name of the virtual guest as registered in DNS VirtualMovement_ClusterName The physical host cluster the virtual guest resides in VirtualMovement_GuestUUID The virtual guests Universally Unique Identifier VirtualMovement_CurrentHost The physical host the virtual guest moved from VirtualMovement_TargetHost The physical host the virtual guest moved to VirtualMovement_MigrationCompleted The date/time the virtual guest moved from the source host to the target host VirtualMovement_EventType The migration event type e.g. vim.event.VmMigratedEvent VirtualMovement_CmdletName The cmdlet triggering the migration event e.g. Move-SCVirtualMachine VirtualNetwork_ClusterName The physical host cluster the virtual guest resides in VirtualNetwork_HostName The physical host the virtual guest currently resides on VirtualNetwork_GuestName The virtual guests display name VirtualNetwork_GuestUUID The virtual guests Universally Unique Identifier VirtualNetwork_MACAddress The virtual guests MAC address VirtualNetwork_IPAddress The virtual guests IP address(es) NOTE: Not considered External PII because this IP address is specific to servers not workstations. VirtualNetwork_IPSubnet The virtual guests IP subnet VirtualPowerEvent_EventTimestamp The date/time the virtual guest was powered on / off VirtualPowerEvent_PowerDate The date/time the virtual guest was powered on / off VirtualPowerEvent_GuestName The virtual guests display name VirtualPowerEvent_GuestUUID The virtual guests Universally Unique Identifier VirtualPowerEvent_HostName The physical host the virtual guest was on when the power on/off event occurred VirtualPowerEvent_Event The type of event e.g. vim.event.DrsVmPoweredOnEvent VirtualPowerEvent_CmdletName The cmdlet triggering the powered on/off event e.g. Start-SCVirtualMachine VirtualPowerEvent_ClusterName The physical host cluster the virtual guest resides in VirtualVersion_Version The version of the hypervisor technology managing the virtual guest e.g. VirtualCenter Database 6.0 VirtualVersion_LatestActivityDate The date of the last activity to occur in the hypervisor management database
## Windows actual resource consumption Scan
The following datapoints are collected when a user performs a Windows actual resource consumption scan.
SQL information
The SQL information is collected during actual resource consumption scan only if a user configures to do so in the console or the config file. Name | Description --- | --- arcsqlcpuhour_CpuIdlePercent | Percentage of the CPU that is arcsqlcpuhour_CpuOtherPercent | Percentage of the CPU that being utilized by services other than SQL Server arcsqlcpuhour_EventDatetimeUtc | The UTC date / time the consumption date was collected arcsqlcpuio_CpuTimeMs | CPU time used by SQL in millisecond intervals arcsqlcpuio_CpuPercent | The percentage of the CPU being consumed by SQL arcsqlcpuio_TotalIoMb | Total SQL related I/O in Mb arcsqlcpuio_ArcDatetimeUtc | The UTC date / time the consumption date was collected arcsqldbconnections_ClientAddress | The IP address of the device connecting to the SQL database NOTE: Not considered External PII because this IP address is specific to servers not workstations. arcsqldbconnections_ProgramName | The program being used to connect to the SQL database arcsqldbconnections_HostName | The name of the device connecting to the SQL database arcsqldbconnections_LoginName | The user/service account being used to connect to the SQL database arcsqldbconnections_ConnectionCount | The number of connections the program connecting to the SQL database is creating arcsqldbconnections_ArcDatetimeUtc | The UTC date / time the consumption date was collected arcsqldbstats_SizeOnDiskMb | The SQL database size on disk in Mb arcsqldbstats_UsedMb | The amount of space the SQL database is actually using versus its size on disk in Mb arcsqldbstats_IsData | The amount of the SQL database that is data versus log arcsqldbstats_ReadMb | The quantity of SQL database reads that have occurred since last reboot in Mb arcsqldbstats_WrittenMb | The quantity of SQL database writes that have occurred since last reboot in Mb arcsqldbstats_NumberOfReads | The total number of SQL database reads that have occurred since last reboot arcsqldbstats_NumberOfWrites | The total number of SQL database writes that have occurred since last reboot arcsqldbstats_IoStallReadMs | SQL IO stall reads in milliseconds arcsqldbstats_IoStallWriteMs | SQL IO stall writes in milliseconds arcsqldbstats_ArcDatetimeUtc | The UTC date / time the consumption date was collected arcsqldrivestats_Drive | The SQL drive letter arcsqldrivestats_VolumeMountPoint | The SQL mount point arcsqldrivestats_FileSystemType | The SQL file system type arcsqldrivestats_LogicalVolumeName | The SQL logical volume name arcsqldrivestats_TotalSizeGb | The total drive size in Gb arcsqldrivestats_UsedSizeGb | The amount of the drive used in Gb arcsqldrivestats_ReadLatencyMs | SQL read latency in milliseconds arcsqldrivestats_WriteLatencyMs | SQL write latency in milliseconds arcsqldrivestats_OverallLatencyMs | SQL overall latency in milliseconds arcsqldrivestats_AverageBytesPerRead | SQL average bytes per read arcsqldrivestats_AverageBytesPerWrite | SQL average bytes per write arcsqldrivestats_AverageBytesPerTransfer | SQL average bytes per transfer arcsqldrivestats_ArcDatetimeUtc | The UTC date / time the consumption date was collected
Windows disk information
| Name | Description |
|---|---|
| arcwindisk_DiskQueueLength | Disk queue length when the scan was performed |
| arcwindisk_AvgDiskQueueLength | Average disk queue length when the scan was performed |
| arcwindisk_ReadMbPerSec | Disk reads in Mb per second |
| arcwindisk_WriteMbPerSec | Disk writes in Mb per second |
| arcwindisk_ReadDiskLatency | The disks read latency |
| arcwindisk_WriteDiskLatency | The disks write latency |
| arcwindisk_KbPerTransfer | The size of the data moved to disk in Kb per transfer |
| arcwindisk_DiskUsePercent | Total disk use percentage |
| arcwindisk_ArcDatetimeUtc | The UTC date / time the consumption date was collected |
Windows event log information
By default, The Windows event log collection is turned off if we initiate the actual resource consumption scan. Users can choose to turn it on using the config file.
| Name | Description |
|---|---|
| arcwineventlog_LogName | Name of the log that event data is being collected from |
| arcwineventlog_Category | The event task category |
| arcwineventlog_Source | The logs source |
| arcwineventlog_EventId | The event ID |
| arcwineventlog_EventDate | The date the event occurred |
| arcwineventlog_UserName | The user/service name corresponding to the event |
| arcwineventlog_Message | The events detailed message |
| arcwineventlog_ArcDatetimeUtc | The UTC date / time the consumption date was collected |
Windows netstat information
| Name | Description |
|---|---|
| arcwinnetstat_LocalAddress | The local IP address of the netstat connection NOTE: Not considered External PII because this IP address is specific to servers not workstations. |
| arcwinnetstat_ForeignAddress | The foreign address of the netstat connection NOTE: Considered External PII because connections will include both servers and workstations. |
| arcwinnetstat_ForeignPort | The port number the foreign address is using |
| arcwinnetstat_State | The state of the connection when the scan was performed |
| arcwinnetstat_ProcessName | The name of the process being connected to and its install path |
| arcwinnetstat_ArcDatetimeUtc | The UTC date / time the consumption date was collected |
Windows network information
| Name | Description |
|---|---|
| arcwinnetwork_SendMbPerSec | The amount of data sent from the device in Mb per second since the previous scan |
| arcwinnetwork_ReceiveMbPerSec | he amount of data received by the device in Mb per second since the previous scan |
| arcwinnetwork_TotalMbSent | The total amount of data sent from the device in Mb |
| arcwinnetwork_TotalMbReceived | The total amount of data received by the device in Mb |
| arcwinnetwork_ArcDatetimeUtc | The UTC date / time the consumption date was collected |
Windows process information
| Name | Description |
|---|---|
| arcwinprocess_ProcessName | The name of the process consuming CPU and memory resources |
| arcwinprocess_ProcessPath | The install path of the process consuming CPU and memory resources |
| arcwinprocess_ProcessVersion | The version of the process consuming CPU and memory resources |
| arcwinprocess_MemoryMb | The amount of memory being consumed by the process in Mb |
| arcwinprocess_CpuPercent | The percentage of the CPU being consumed by the process |
| arcwinprocess_ArcDatetimeUtc | The UTC date / time the consumption date was collected |
Linux actual resource consumption scan
The following data is collect when a user performs a Linux actual resource consumption scan.
Linux disk information
| Name | Description |
|---|---|
| arclinuxdisk_ReadMbPerSec | isk reads in Mb per second |
| arclinuxdisk_WriteMbPerSec | Disk writes in Mb per second |
| arclinuxdisk_KbPerTransfer | The size of the data moved to disk in Kb per transfer |
| arclinuxdisk_DiskUsePercent | Total disk use percentage |
| arclinuxdisk_ArcDatetimeUtc | he UTC date / time the consumption date was collected. |
Linux netstat information
| Name | Description |
|---|---|
| arclinuxnetstat_LocalAddress | The local IP address of the netstat connection NOTE: Not considered External PII because this IP address is specific to servers not workstations. |
| arclinuxnetstat_ForeignAddress | he foreign address of the netstat connection NOTE: Considered External PII because connections will include both servers and workstations. |
| arclinuxnetstat_LocalPort | The port number the local address is using |
| arclinuxnetstat_ForeignPort | The port number the foreign address is using |
| arclinuxnetstat_State | The state of the connection when the scan was performed |
| arclinuxnetstat_ProcessName | The name of the process being connected to and its install path |
| arclinuxnetstat_ArcDatetimeUtc | The UTC date / time the consumption date was collected. |
Linux network information
| Name | Description |
|---|---|
| arclinuxnetwork_SendMbPerSec | The amount of data sent from the d evice in Mb per second since the previous scan |
| arclinuxnetwork_ReceiveMbPerSec | The amount of data received by the device in Mb per second since the previous scan |
| arclinuxnetwork_TotalMbSent | The total amount of data sent from the device in Mb |
| arclinuxnetwork_TotalMbReceived | The total amount of data received by the device in Mb |
| arclinuxnetwork_ArcDatetimeUtc | The UTC date / time the consumption date was collected. |
Linux process information
| Name | Description |
|---|---|
| arclinuxprocess_ProcessName | The name of the process consuming CPU and memory resources |
| arclinuxprocess_ProcessPath | he install path of the process consuming CPU and memory resources |
| arclinuxprocess_MemoryMb | The amount of memory being consumed by the process in Mb |
| arclinuxprocess_CpuPercent | The percentage of the CPU being consumed by the process |
| arclinuxprocess_ArcDatetimeUtc | The UTC date / time the consumption date was collected. |
Next steps
Review resource consumption data views.