Discovery data imported to Insight

Once the collected data is assembled and imported to Insight, it looks like this:

Object schema treeObject schema graph

Object schema tree

Object schema graph

Discovery

AttributeDefault typeDefault identifierUniqueDescriptionIQL

Name

TEXT





Instance Id

TEXT

(tick)


Instance Identifier of the Tool.


Prefix

TEXT



Instance prefix of the Tool.


Version

TEXT



Version of the Tool.


Main Password Hash

TEXT



Hash value for the settings password.


Export Type

TEXT



Used type for exporting result data.


Export Login

TEXT



Login name for exporting result data to remote systems.


Export Password

TEXT



Password for exporting result data to remote systems.


Export RSA File

TEXT



Path to the used RSA Key for exporting result data to remote systems.


Export Path

TEXT



Export path where result data will be copied.


Export Zip Password

TEXT



Password that will be used to encrypt the result data.


Scan Log Level

TEXT



Detail level of the log file.


Delete Logs After

INTEGER



Configured amount of day, when the log files will be deleted.


Delete Unknown Hosts

BOOLEAN



Configuration if unknown host will be removed from the result data.


Delete Basic Hosts

BOOLEAN



Configuration if basic hosts will be removed from the result data.


Auto add sudo

BOOLEAN



Configuration if for each unix command a sudo is set as prefix.


Delete VM Guests

BOOLEAN



Configuration if virtual guest systems will be removed from the result data.


Try VM-Guest scan

BOOLEAN



Configuration if virtual guest systems will be tried to get by a full scan.


Delete Duplicate Device

BOOLEAN



Configuration if a device that also exists as host will be removed from the result.


Split Logs per Thread

BOOLEAN



Configuration if log files will be split up for each thread.


Agent Port

INTEGER



The configured port of the destination agents.


Agent Scan Interval

INTEGER



Interval (in minutes) when the discovery tool check available data from agents.


Agent IP Range

TEXTAREA



IP Range for possible Agents.


Agent Timeout

INTEGER



The configured agent connection timeout.


Number of Threads

INTEGER



Amount of parallel scan threads.


Max Scan Thread Time

INTEGER



Maximum time (in minutes) for a scan thread.


Ping Timeout

INTEGER



Timeout (in milliseconds) for ICMP requests.


Ping Retry

INTEGER



Amount of ICMP requests retries.


SNMP Timeout

INTEGER



Timeout (in milliseconds) for SNMP commands.


WMI Timeout

INTEGER



Timeout (in seconds) for WMI commands.


SSH Timeout

INTEGER



Timeout (in seconds) for SSH commands.


VIM Timeout

INTEGER



Timeout (in seconds) for VIM commands.


Use PowerShell

BOOLEAN



Try to use PowerShell connection preferred to WMI.


License

TEXTAREA



The added license text.


Service Restart Interval

INTEGER



The interval in hour when the service will be automatically performs a restart.


Next Service Restart

DATE_TIME



Date when the next service restart will be execute.


Collector

Object - Collector



Reference to the Collector that was used to collect and transport the discovery result data.

"Instance Id" = ${Collector}

Host

Object - Host



Reference to the Host that is running the Discovery.

"Object Hash" = ${Host Object Hash}

Enabled Pattern Files

TEXTAREA



List of the enabled pattern files.



Scan settings

AttributeDefault typeDefault identifierUniqueDescriptionIQL

Name

TEXT





Object Id

TEXT

(tick)


Identifier of the ScanSetting.


Disabled

BOOLEAN



Indicates if the scan setting is disabled or not.


Description

TEXT



Custom description that can be set to an setting.


IP Range

TEXTAREA



Configured IP Range that will be used for a scan.


Scan Interval

TEXT



Interval (Weekly or Daily) of the scan setting.


Next Scan Date

DATE_TIME



Date and time when the configured ip range will be used for a scan.


Discovery

Object - Discovery

(tick)


Reference to the Discovery that is using the setting.

"Instance Id" = ${Discovery}

Disabled Pattern Files

TEXTAREA



List of the disabled pattern files.



Collector

AttributeDefault typeDefault identifierUniqueDescriptionIQL

Name

TEXT





Instance Id

TEXT

(tick)


Instance Identifier of the Tool.


Prefix

TEXT



Instance prefix of the Tool.


Version

TEXT



Version of the Tool.


Main Password Hash

TEXT



Hash value for the settings password.


Export Type

TEXT



Used type for exporting result data.


Export Login

TEXT



Login name for exporting result data to remote systems.


Export Password

TEXT



Password for exporting result data to remote systems.


Export RSA File

TEXT



Path to the used RSA Key for exporting result data to remote systems.


Export Path

TEXT



Export path where result data will be copied.


Export Zip Password

TEXT



Password that will be used to encrypt the result data.


Scan Log Level

TEXT



Detail level of the log file.


Delete Logs After

INTEGER



Configured amount of day, when the log files will be deleted.


Export Interval

INTEGER



Configured time (in minutes) to check if data to transport is available.


Import Folder

TEXT



Path to the source folder for transferring.


Import Zip Password

TEXT



Password of the import result data.


Host

Object - Host




"Object Hash" = ${Host Object Hash}


Host

AttributeDefault typeDefault identifierUniqueDescriptionIQL

Status

STATUS



  • Found and discovered host is set up "Running"
  • Rejected host (due to invalid credentials) is set to "Rejected"
  • Existing host that is not found is set to "Not Found"


Name

TEXT





Hostname

TEXT



Hostnames are human-readable nicknames that correspond to the address of a system connected to a network.


FQDN

TEXT



A fully qualified domain name consists of a list of domain labels representing the hierarchy from the lowest relevant level in the DNS to the top-level domain.


System Up Time

TEXT



Timespan since the last boot.


System Up Time Minutes

INTEGER



Minutes since the last boot.


Timezone

TEXT



Timezone information.


RAM

INTEGER



Amount of installed Random-access memory.


Model

TEXT



Computer Model Information directly from the hardware.
Some information is not correctly configured by hardware manufacturers and may therefore be unavailable.


Serial Number

TEXT



Computer Serialnumber directly from the hardware.
Some information is not correctly configured by hardware manufacturers and may therefore be unavailable.


UUID

TEXT



Universally unique identifier generated by the operating system.


Vendor

TEXT



Computer Vendor directly from the hardware.
Some information is not correctly configured by hardware manufacturers and may therefore be unavailable.


Virtual

TEXT



Specifies if the system is a virtual system. (Just set to True when virtual.)


Hypervisor

Object - Host



The hosting system where the virtual guest is running on.

"Object Hash" = ${Hypervisor}

Last User

TEXT



The last user that has logged in to a Host.


Operating System

Object - Operating System




"Object Hash" = ${Operating System}

CPUs

Object - CPU




"Object Hash" IN (${CPUs${0}})

Network Interfaces

Object - Network Interface



For Identifier-Hash the first
available MAC-Address will be used

"Host Object Hash" = ${Object Hash}

Storage Devices

Object - Storage Device




"Host Object Hash" = ${Object Hash}

File Systems

Object - File System




"Host Object Hash" = ${Object Hash}

Scanning Information

Object - Scanning Information




"Object Hash" = ${Scanning Information}

Referenced Assets

Object - Network Assets




objectType in objectTypeAndChildren("Network Assets") AND "Object Hash" IN (${Referenced Assets${0}})

Object Hash

TEXT

(tick)


Identifier Hash from Discovery application.



Connected device

AttributeDefault typeDefault identifierUniqueDescriptionIQL

Status

STATUS



  • Found and discovered device is set up "Running"
  • Existing device that is not found is set to "Not Found"


Name

TEXT





Device ID

TEXT



The identifier set by the operating system.


Host

Object - Host




"Object Hash" IN (${Host${0}})

Object Hash

TEXT

(tick)


Identifier Hash from Discovery application.



Virtual Guest

AttributeDefault typeDefault identifierUniqueDescriptionIQL

Status

STATUS



  • Started Virtual Guest is set to "RUNNING"
  • Stopped Virtual Guest is set to "STOPPED"
  • Suspended Virtual Guest is set to "PAUSED"


Name

TEXT



Name of the Virtual Guest.


Hostname

TEXT



Hostname of the Virtual Guest. (If it is available)


Notes

TEXTAREA





UUID

TEXT



Unique identifier of the Virtual Guest.


RAM

INTEGER



Configured RAM of the Virtual Guest.


Configuration File

TEXT



Configuration file of the Virtual Guest.


Guest Type

TEXT



Type of the Virtual Guest.


Operating System

Object - Operating System




"Object Hash" = ${Operating System}

Network Interfaces

Object - Network Interface



For Identifier-Hash the first
available MAC-Address will be used

"Virtual Guest Object Hash" = ${Object Hash}

CPUs

Object - CPU




"Object Hash" IN (${CPUs${0}})

Hypervisor

Object - Host



The hosting system where the virtual guest is running on.

"Object Hash" = ${Host Object Hash}

Host System

Object - Host



The host system which this virtual guest object is representing.

"Object Hash" = ${Host System}

Object Hash

TEXT

(tick)


Identifier Hash from Discovery application.



Device

AttributeDefault typeDefault identifierUniqueDescriptionIQL

Status

STATUS



  • Found and discovered device is set up "Running"
  • Existing device that is not found is set to "Not Found"


Name

TEXT





Hostname

TEXT



Hostnames are human-readable nicknames that correspond to the address of a device connected to a network.


FQDN

TEXT



A fully qualified domain name consists of a list of domain labels representing the hierarchy from the lowest relevant level in the DNS to the top-level domain.


System Up Time

TEXT



Timespan since the last boot.


System Up Time Minutes

INTEGER



Minutes since the last boot.


RAM

INTEGER



Amount of installed Random-access memory.


Location

TEXT



The location information that is set manually by the administrator of the network device.


Contact

TEXT



The contact information that is set manually by the administrator of the network device.


Network Interfaces

Object - Network Interface




"Object Hash" IN (${Network Interfaces${0}})

Scanning Information

Object - Scanning Information




"Object Hash" = ${Scanning Information}

Referenced Assets

Object - Network Assets




objectType in objectTypeAndChildren("Network Assets") AND "Object Hash" IN (${Referenced Assets${0}})

Object Hash

TEXT

(tick)


Identifier Hash from Discovery application.



Scanning information

AttributeDefault typeDefault identifierUniqueDescriptionIQL

Scan Time

TEXT



The start time of the scan.


Network Interface

Object - Network Interface




"Object Hash" = ${Network Interface}

Used Credential ID

TEXT



The Identifier of the used credential.


Discovery Tool

Object - Discovery




"Instance Id" = ${Discovery Tool}

Discovery Version

TEXT



The version of the Discovery that is used.


Scan Setting

Object - Scan Setting




"Object Id" = ${Scan Setting}

Scanning Time Elapsed

DOUBLE



Used time for the scan.


Object Hash

TEXT

(tick)


Identifier Hash from Discovery application.



Network interface

AttributeDefault typeDefault identifierUniqueDescriptionIQL

Name

TEXT





Device ID

TEXT



The identifier set by the operating system.


Description

TEXT



Description of the interface.


MAC Address

TEXT



A unique identifier assigned to network interfaces for communications at the data link layer of a network segment.


IP4

TEXT



32-bit address of the interface.


IP6

TEXT



128-bit address of the interface.


Subnet4

TEXT



32-bit subnet address of the interface.


Subnet6

TEXT



128-bit subnet address of the interface.


Gateway

TEXT



Gateway address assigned to the interface.


DHCP

TEXT



Address of the assigned DHCP server.


Address Space

TEXT



Address Space (Private or Public) for the IP4 Address.


Object Hash

TEXT

(tick)


Identifier Hash from Discovery application.


Host Object Hash

TEXT

(tick)




Device Object Hash

TEXT

(tick)




Virtual Guest Object Hash

TEXT

(tick)





Operating system

AttributeDefault typeDefault identifierUniqueDescriptionIQL

Name

TEXT





Manufacturer

TEXT



Manufacturer of the Operating System or Distribution.


OS Architecture

TEXT



Information about the underling processor architecture.


Version

TEXT



Main version of the operating system.


Build Number

TEXT



Build number of the operating system.


Codename

TEXT



The codename of the operating system.


Kernel

TEXT



Version of the used kernel.


ServicePack Major Version

INTEGER



Version of the installed Major Service Pack.


ServicePack Minor Version

INTEGER



Version of the installed Minor Service Pack.


Object Hash

TEXT

(tick)


Identifier Hash from Discovery application.



CPU


AttributeDefault typeDefault identifierUniqueDescriptionIQL

CPU Type

TEXT



Model of the CPU.


Device ID

TEXT



The identifier set by the operating system.


Cores Per Processor

INTEGER



Amount of cores that the CPU has.


Max CPU Speed

INTEGER



Maximum clock frequency of the CPU.


Object Hash

TEXT

(tick)





Storage device

AttributeDefault typeDefault identifierUniqueDescriptionIQL

Name

TEXT





Status

TEXT





Description

TEXT





Device ID

TEXT



The identifier set by the operating system.


Size

INTEGER



Total available size of the device.


Serial Number

TEXT





UUID

TEXT





Firmware Revision

TEXT





Interface Type

TEXT





Manufacturer

TEXT





Media Type

TEXT





Model

TEXT





Referenced File Systems

Object - File System



Reference to file systems that are belong to this storage device.

"Object Hash" IN (${Referenced File Systems${0}}) AND "Host Object Hash" = ${Host Object Hash}

Host Object Hash

TEXT

(tick)




Object Hash

TEXT

(tick)


Identifier Hash from Discovery application.



File system

AttributeDefault typeDefault identifierUniqueDescriptionIQL

Status

STATUS



  • Existing file system is set to "OK"
  • Existing file system that is not found is set to "Not Found"


Name

TEXT



Description of the filesystem.


Mount

TEXT



Used mount path or letter for the filesystem.


Size

INTEGER



Total available size of the filesystem.


Used

INTEGER



Used space of the filesystem.


Free

INTEGER



Available free space of the filesystem.


Partition Info

TEXT



Description where the filesystem is logical located.


Volume Serial Number

TEXT



Serial number of the volume.


Object Hash

TEXT

(tick)


Identifier Hash from Discovery application.


Host Object Hash

TEXT

(tick)




License

AttributeDefault typeDefault identifierUniqueDescriptionIQL

Name

TEXT





License Key

TEXTAREA



Value of the license key.


Host

Object - Host




"Object Hash" IN (${Host${0}})

Application

Object - Application




"Object Hash" IN (${Application${0}})

Operating System

Object - Operating System




"Object Hash" IN (${Operating System${0}})

End Date

DATE



The end date of the license.


Object Hash

TEXT

(tick)


Identifier Hash from Discovery application.



Application

AttributeDefault typeDefault identifierUniqueDescriptionIQL

Name

TEXT



Display name of the application.


Description

TEXTAREA



Description of the application.


Install Date

DATE



Date when the application was installed on the system.


Install Location

TEXT



Location where the application is installed on the system.


Vendor

TEXT



Vendor of the application.


Version

TEXT



Version of the application.


Release

TEXT



Release information of the application.


Visible in MS-UI

BOOLEAN



Indicates if the software is visible under Windows Add/Remove Programs.


Referenced Applications

Object - Application



Reference to applications that are running or using this application.

"Object Hash" IN (${Referenced Applications${0}})

Referenced Databases

Object - Database



Reference to databases that are using or hosted by this application.

"Object Hash" IN (${Referenced Databases${0}})

Object Hash

TEXT

(tick)


Identifier Hash from Discovery application.


Referenced Hosts

Object - Host



Reference to Hosts that are running this application.

"Object Hash" IN (${Hosts Connected${0}})

Referenced Virtual Guests

Object - Virtual Guest



Reference to the Virtual Guests that are running this application.

"Object Hash" IN (${Virtual Guest Connected${0}})


Database

AttributeDefault typeDefault identifierUniqueDescriptionIQL

Name

TEXT



Name of the Database.


Object Hash

TEXT

(tick)


Identifier Hash from Discovery application.


Host

Object - Host

(tick)


Host that is running the Database.

"Object Hash" = ${Host Object Hash}


Application service

AttributeDefault typeDefault identifierUniqueDescriptionIQL

Status

STATUS



Possible values:

  • Running
  • Stopped
  • Paused
  • Continue_Pending
  • Pause_Pending
  • Start_Pending
  • Stop_Pending


Name

TEXT



Display name of the service.


Process ID

INTEGER



Actual process id of the service.
This information is not available at all kind of operating systems


Description

TEXTAREA



Description of the application service.


Short Name

TEXTAREA



Short name of the application service.


Service Type

TEXT



Type of the service.


Started

BOOLEAN



Indicate if the service is running.


Start Mode

TEXT



Start mode of the service.


Object Hash

TEXT

(tick)


Identifier Hash from Discovery application.


Host

Object - Host

(tick)



"Object Hash" = ${Host Object Hash}


Patch

AttributeDefault typeDefault identifierUniqueDescriptionIQL

HotFix ID

TEXT



Identifier of the installed patch.


Description

TEXT



Description of the installed patch.


Caption

TEXT



Link to the Microsoft Article page of the patch.


Install Date

DATE



Date when the patch was installed on the system.


ServicePack In Effect

INTEGER



Indicate if it is installed by a service pack.


Object Hash

TEXT

(tick)


Identifier Hash from Discovery application.


Host

Object - Host




"Object Hash" IN (${Hosts Connected${0}})


Users

Attribute

Default type

Default identifier

Unique

Description

IQL

AccountType

INTEGER



Describe the characteristics of a user account


Caption

TEXT



Domain and username of the account.


Description

TEXT



Description of the account


Disabled

BOOLEAN



User account is disabled


Domain

TEXT



Name of the domain to which a user account belongs


FullName

TEXT



Full name of a local user


Lockout

BOOLEAN



If true, the user account is locked out of the operating system


Name

TEXT



Name of the user account on the domain that the Domain property of this class specifies.


PasswordChangeable

BOOLEAN



If true, the password on this user account can be changed.


PasswordExpires

BOOLEAN



If true, the password on this user account expires.


PasswordRequired

BOOLEAN



If true, a password is required on a user account. If false, this account does not require a password.


SID

TEXT



Security identifier (SID) for this account.


SIDType

INTEGER



Enumerated value that specifies the type of SID.


Status

TEXT



Current status of an object.


Object Hash

TEXT

(tick)


Identifier Hash from Discovery application.



Groups

Attribute

Default type

Default identifier

Unique

Description

IQL

Caption

TEXT



A short textual description of the object.


Description

TEXT



A textual description of the object.


Name

TEXT



Name of the group account on the domain specified by the Domain property of this class.


Status

TEXT



String that indicates the current status of the object.


LocalAccount

BOOLEAN



If TRUE, the account is defined on the local machine.


SID

TEXT



Security identifier (SID) for this account.


SIDType

INTEGER



Enumerated values that specify the type of security identifier (SID).


Domain

TEXT



Name of the domain to which the group account belongs.


ObjectHash

TEXT

(tick)


Identifier Hash from Discovery application.


UsersOBJECT - USER

Reference to the members of the group.“ObjectHash” IN (${Users${0}})
Last modified on Jan 14, 2022

Was this helpful?

Yes
No
Provide feedback about this article
Powered by Confluence and Scroll Viewport.