1E 9.x (on-premises)

DiskSystemAverageSecondsPerWrite

Device

How many disk operations took place over the sample interval, inverted, on all local disks (not just the system disk).

DiskSystemFreeSpaceMegabytes

Device

The free space  on the system disk, measured in megabytes. The system disk is that with the home directory of the (root) user that runs the 1E Client.

DiskSystemSplitIoPerSecond

Device

Not split I/O operations, but the average number of fragmented files over the interval divided by the interval, on all local disks (not just the system disk).

DiskSystemUsageTimePercent

Device

The percentage of time that all local disks (not just the system disk) spent reading and writing.

MemoryHardPageFaultsPerSecond

Device

The number of pages swapped in per second

MemoryPageFileUsagePercent

Device

The percentage of the page file that is in use.

MemoryUsageMegabytes

Device

The amount of physical memory in use, measured in megabytes.

MemoryUsagePercent

Device

The percentage of physical memory in use.

NetworkActiveTcpConnections

Device

The average number of active (inbound and output) TCP connections.

NetworkBroadcastRate

Device

The sum of multicast packets that have been sent and received per second. It represents the total for all physical network interfaces on the endpoint.

NetworkBytesReceivedPerSecond

Device

The average number of bytes received per second across all network adapters.

NetworkBytesSentPerSecond

Device

The average number of bytes sent per second across all network adapters.

NetworkNetRetransmitRate

Device

The rate of TCP segment (both IPv4 and IPv6) retransmissions done per second.

NetworkOutputQueueLength

Device

Length of the output packet queue.

NetworkPacketRate

Device

The sum of all TCP packets that have been sent and received per second. It represents a measure of network resource utilization on the endpoint.

NetworkPacketsOutboundDiscarded

Device

The number of outgoing packets dropped by the network adapters.

NetworkPacketsOutboundErrors

Device

The number of outgoing packets dropped by the network adapter due to errors at physical layer, such as loss of carrier during transmission.

NetworkPacketsReceivedDiscarded

Device

The number of incoming packets dropped due to non availability of receive buffers to store the incoming frames. This indicates that the rate of incoming packets is higher than the rate of packets being consumed by the system from the receive buffers.

NetworkPacketsReceivedErrors

Device

The number of packets dropped by the network adapter due to various errors at physical layer, like CRC errors, MTU error, frame too long, invalid frame length etc.

NetworkUsageAverageUserLoggedIn

Device

The average network bandwidth used on a device when a user is active on the device. If the user is not logged in then this value is empty. If the user is logged in then it is the same as NetworkUtilizationPercent. A "logged in" user is someone using the Mac desktop; SSH sessions are ignored.

NetworkUtilizationPercent

Device

The percentage of available network bandwidth which is in use. Bandwidth saturation occurs when all a circuits available bandwidth in a given direction is being utilized by a large upload or download; this results high latency and performance issues as subsequent packets start to buffer, eventually timing out and displaying symptoms such as slow speeds and packet loss.

OsBootTimeSeconds

Device

The number of seconds taken for the device to boot to the logon prompt.

Not always available (if a certain necessary value has scrolled out of the system log).

OsCrashes

Device

The number of operating system crashes (unexpected shutdowns).

ProcessorTimePercent

Device

The percentage of time that the processor is in use.

ProcessorTimeSeconds

Device

The average number of CPU seconds (amount of processor work) per second. A value of 1 indicates that a single CPU core was entirely busy for a second.

SoftwareCrashes

Device

The number of software crashes (where an application terminates unexpectedly), and the actual executables that crashed.

WirelessReceiveRate

Device

The maximum possible link layer receive transfer speed in Mbps that can be expected from the Wireless networking on the endpoint.

WirelessSignalQuality

Device

A percentage value that represents the signal quality of the wireless network capability on the endpoint. A value of 100% is optimal, as the figure degrades it will proportionally reduce the network bandwidth of wireless networking.

WirelessTransmitRate

Device

The maximum possible link layer send transfer speed in Mbps that can be expected from the Wireless networking on the endpoint.

Crashes

Software

The total number of software crashes for the application.

HandleCount

Software

The average number of file descriptors in use by the process.

InstanceCount

Software

The total number of software hangs for the application.

IoReadKilobytesPerSecond

Software

The average number of disk kilobytes read per second for the process. This excludes bytes read from pipes and sockets.

IoWriteKilobytesPerSecond

Software

The average number of disk kilobytes written per second for the process. This excludes bytes written to pipes and sockets.

MemoryUsagePhysicalKilobytes

Software

The amount of physical memory in use by the application.

MemoryUsageVirtualKilobytes

Software

The amount of resident memory in use by the application.

ProcessorTimePercent

Software

The average CPU load generated by the process.

ProcessorTimeSecondsPerSecond

Software

The average number of CPU seconds (amount of processor work) per second for the application. A value of 1 indicates that a single CPU core was entirely busy for a second.

DiskReadIops

Software

The average number of I/O read operations per second for the application.

DiskWriteIops

Software

The average number of I/O write operations per second the application.

NetworkBytesExchangedPerSecond

Software

The average number of bytes exchanged per second across all network adapters for the application.

NetworkBytesReceivedPerSecond

Software

The average number of bytes received per second across all network adapters for the application.

NetworkBytesSentPerSecond

Software

The average number of bytes sent per second across all network adapters for the application.

NetworkTotalDataReceivedMegabytes

Software

The total data (in megabytes) received across all network adapters for the application.

NetworkTotalDataSentMegabytes

Software

The total data (in megabytes) sent across all network adapters for the application.

BootMachineGroupPolicyProcessingTimeSeconds

Device

Time taken at boot time to apply Machine Group Policy settings. In the unlikely case when the Boot Group Policy event is not logged by Windows, we pick the closest periodic or manual Machine Group Policy Processing event to the Boot time.

BootMainPathBootTimeSeconds

Device

Main path boot time starts when you see the Start Windows splash screen and ends when the desktop appears.

BootPostBootTimeSeconds

Device

Post boot time starts when the desktop appears. During this time, services and application may be starting but it is not considered complete until the system has reached a certain idle state.

BootStartupAppsTimeSeconds

Device

Shows the combined "CPU at start-up" time for all application under the 'Startup' tab in Windows Task Manager.

BootUserGroupPolicyProcessingTimeSeconds

Device

Time taken at boot time to apply User Group Policy settings. In the unlikely case when the Boot Group Policy event is not logged by Windows, we pick the closest periodic or manual User Group Policy Processing event to the Boot time.

DiskOthersAverageQueueLength

Device

The number of disk operations (read and write) which are pending for non-system disk(s).

DiskOthersAverageSecondsPerWrite

Device

The speed, in seconds, that write operations are taking on non-system disk(s).

DiskOthersFreeSpaceMegabytes

Device

The free space across non-system disk(s), measured in megabytes.

DiskOthersSplitIoPerSecond

Device

The number of I/O operations that were broken into multiple requests across non-system disk(s).

DiskOthersUsageTimePercent

Device

The percentage of time that non-system disk(s) were busy servicing requests.

DiskSystemAverageQueueLength

Device

The number of disk operations (read and write) which are pending for the system disk.

OsServiceFailures

Device

The number of service failures (where a service fails to start of shutdown correctly).

PerformanceAnomalies

Device

The number of general performance anomalies detected on the device. This metric is presently unsupported, even on Windows.

ProcessorInterruptTimePercent

Device

The percentage of time that the CPU spent servicing hardware interrupts.

ProcessorQueueLength

Device

SoftwareHangs

Device

The number of software hangs (where an application becomes unresponsive).

Hangs

Software

The total number of software hangs for the application.

SensitivityImpactPercent

Software

How sensitive this application appears to be in relation to operating system activity. A higher value means that this application has been seen to be consuming more CPU resources when the operating system itself is working harder, which may adversely affect the performance of the device overall (the software is "getting in the way" of the operating system). This behaviour is typically seen in agent-based software which hooks in to the operating system, such as anti-virus and anti-malware products, or other similar security/monitoring software.