ºÚÁϺ£½Ç91Èë¿Ú

Get Started: System Insights

ºÚÁϺ£½Ç91Èë¿Ú’s System Insights extends device management by providing telemetry across your fleet of macOS, Windows, and Linux devices. You can easily gather information from ºÚÁϺ£½Ç91Èë¿Ú-managed devices with our RESTful API and . 

You can use the System Insights feature to:

  • Easily take stock of your suite of devices and the state of the machines in your organization.
    • See inventory information like vendor, model, serial number, etc.
  • Query device endpoints to proactively resolve issues without having to interrupt employees.
  • Provide information to auditors proving that devices in your organization are compliant. 
  • Gather information about device uptime to leverage when diagnosing issues.
  • Allow Security and DevOps Teams to interrogate machines to look for security vulnerabilities.
    • See which devices are protected by disk encryption and which need to be updated.

Enabling System Insights

Prerequisites:

To automatically enable System Insights for new devices:

  1. ±«²Ô»å±ð°ùÌýSettings > Features, toggle System Insights onÌý´Ç°ùÌýoff.Ìý
  2. Under Auto enable System Insights on new devices, select which devices you’d like to enable this feature. Newly added devices will automatically have System Insights enabled.

Note:

Devices that existed in your account prior to turning on auto-enablement require that you manually enable System Insights for an individual device. 

  1. Click Save if these are your only changes.

There are two ways to enable System Insights for an individual device:

From the device page:

  1. Under DEVICE MANAGEMENT > Devices, select a device to view its details.
  2. On the Insights tab, if System Insights are Disabled an informational block will prompt you to Enable on Device.
  3. Click Save Device.

From the more actions menu:

  1. Select a single device from the list view. 
  2. Click more actions, and choose Enable System Insights
  3. You are prompted to confirm your selection. Click enable

To enable System Insights for multiple devices:

  1. Under DEVICE MANAGEMENT > Devices, select multiple devices by clicking the checkbox for each appropriate device. 
  2. Click more actions, then select Enable System Insights.​

To re-enable System Insights after previously disabling System Insights for your organization:

  1. Under Settings, toggle System Insights to on
  2. You are prompted to confirm your selection. Click ok.

Understanding the System Insights Collects

System Insights collects the following data from your systems.

Every request for system insights data reports the collection_time, which is the timestamp the data was collected from the system. Data is collected every hour. Offline systems report the last known state when they went offline.

This includes vital information about:

  • Users and groups
  • Hardware and disk utilization
  • Applications and browser extensions
  • Encryption settings and software versioning

Note:

See  for all of the endpoints. 

Data Categories

The following table describes the data categories System Insights gathers by system.

SI Data Categories

System Insights Category Windows Mac Linux
System Info and Hardware
  • Bitlocker info
  • Certificates
  • Disk info 
  • Logical drives
  • Patches
  • Scheduled tasks
  • Services
  • Shared resources
  • Startup items
  • System info
  • Uptime
  • Windows security products
  • Battery 
  • Certificates
  • Crashes
  • CUPS destinations
  • Disk encryption
  • Managed policies 
  • Mounts
  • Shared folders
  • Sharing preferences
  • SIP configuration
  • Startup items
  • System info
  • Uptime
  • USB devices 
  • Disk encryption
  • Mounts
  • System info
  • Uptime
  • USB devices
Operating System
  • Kernel info
  • OS version
  • Kernel info
  • OS version
  • System controls
  • Kernel info
  • OS version
  • System controls
Software
  • Application Compatibility Shim
  • Chrome extensions
  • IE extensions
  • Programs
  • Python packages 
  • Applications
  • Browser plugins
  • Chrome extensions
  • Firefox addons
  • Launchd
  • Python packages 
  • Safari extensions
  • Chrome extensions
  • Firefox addons
  • Python packages
  • deb packages
  • rpm packages
Network
  • Connectivity
  • /etc/hosts
  • Interface address
  • Interface details
  • ALF
  • ALF exceptions
  • ALF explicit auths
  • DNS resolvers
  • /etc/hosts
  • Interface address
  • Interface details
  • DNS resolvers
  • /etc/hosts
  • Interface address
  • Interface details
Users and Groups
  • Groups 
  • Logged in users 
  • Users 
  • Authorized keys
  • Groups 
  • Logged in users 
  • Users - API Only
  • User SSH key states
  • Authorized keys
  • Groups 
  • Logged in users 
  • Shadow
  • Users 
  • User SSH key states

Data

The following table describes the specific data System Insights gathers by system.

Data available as of June 23, 2020:

  • /systeminsights/authorized_keys
  • /systeminsights/appcompat_shims
  • /systeminsights/dns_resolvers
  • /systeminsights/wifi_networks
  • /systeminsights/wifi_status
  • /systeminsights/connectivity
  • /systeminsights/windows_security_products
  • /systeminsights/alf_exceptions
  • /systeminsights/alf_explicit_auths

SI Data

Name Description OS Support
ALF Returns the OS X Application Layer Firewall (ALF) service details. Mac
ALF Exceptions

Returns Application Layer Firewall (ALF) service exceptions. You can access it from the /systeminsights/alf_exceptions endpoint. Data only available in the API.

Mac
ALF Explicit Auths

Returns Application Layer Firewall (ALF) services explicity allowed to perform networking. You can access it from the /systeminsights/alf_explicit_auths endpoint. Data only available in the API.

Mac
Application Compatibility Shims

Returns Application Compatibility Shim information from the registry. You can access it from the /systeminsights/appcompat_shims endpoint. Data only available in the API.

Windows
Applications Returns the OS X applications installed in known search paths, such as /Applications. Mac
Authorized Keys

Returns the authorized_keys table. You can access it from the /systeminsights/authorized_keys endpoint. Data only available in the API.

Linux, Mac
Connectivity

Returns the Windows system's network state. You can access it from the /systeminsights/connectivity endpoint. Data only available in the API.

Windows
Battery Provides information about a MacBook's internal library. Data only available in the API. Mac
BitLocker Info Returns BitLocker status. Windows
Browser Plugins Returns all C/NPAPI browser plugin details for all users. Mac
Certificates

Returns all the Certificate Authorities installed in Keychains/ca-bundles.

This table isn't currently available in our API documentation. You can access it from the /systeminsights/certificates endpoint. 

Mac, Windows
Chrome Extensions Returns the Chrome browser extension. Linux, Mac, Windows
Crashes Returns Application, System, and Mobile App crash logs. Mac
CUPS Destination

Returns all configured printers. This table isn't currently available in our API documentation. You can access it from the /systeminsights/cups_destination endpoint. Data only available in the API.

Mac
Disk Encryptions Returns the disk encryption status and information. Linux, Mac
Disk Info Returns basic information about a system's physical disks. Data only available in the API. Windows
DNS Resolvers

Returns DNS resolvers used by the host. You can access it from the /systeminsights/dns_resolvers endpoint. Data only available in the API.

Linux, Mac
/etc/hosts Returns a line-parsed /etc/hosts. Linux, Mac, Windows
Firefox Add-ons Returns Firefox browser extensions, webapps, and addons. Linux, Mac
Groups Returns the local system group. Data only available in the API. Linux, Mac, Windows
IE Extensions Returns Internet Explorer browser extensions for Windows. Data only available in the API. Windows
Interface Addresses Returns network interfaces and relevant data. Linux, Mac, Windows
Interface Details

Returns detailed information and stats of network interfaces. This table isn't currently available in our API documentation. You can access it from the /systeminsights/interface_details endpoint.

Linux, Mac, Windows
Kernel Info Returns basic active kernel information. Linux, Mac, Windows
Launchd Returns the LaunchAgents and LaunchDaemons from default search paths. Mac
Logical Drives Returns details for logical drives on the system. A logical drive generally represents a single partition. Windows
Logged In Users Returns users with an active shell on the system. Data only available in the API. Linux, Mac, Windows
Managed Policies Returns the managed configuration policies from AD, MDM, MCX, and more. Data only available in the API. Mac
Mounts Returns the system mounted devices and file systems. Linux, Mac
OS Version Returns the operating system version name and version. Linux, Mac, Windows
Patches Returns all the patches applied. Doesn't include patches via MSI or that are downloaded from Windows Update Service Packs. Windows
Programs Returns programs installed by Windows Installer. Some fields may be blank. Windows
Packages Returns installed deb and rpm packages, version, release or revision, maintainer or vendor, and install date. Linux
Python Packages

Returns the Python packages installed in a system. Currently, only Python 2 is supported. This table isn't currently available in our API documentation. You can access it from the /systeminsights/python_packages endpoint. Data only available in the API.

Linux, Mac, Windows
Safari Extensions Returns Safari browser extensions. Currently, macOS Mohave and Catalina aren't supported. Mac
Scheduled Tasks

Returns all of the tasks in the Windows Task Scheduler. This table isn't currently available in our API documentation. You can access it from the /systeminsights/scheduled_tasks endpoint.

Windows
Services

Returns all installed Windows services their and relevant data. This table isn't currently available in our API documentation. You can access it from the /systeminsights/services endpoint.

Windows
Shadow Returns meta information about local system user encrypted passwords. Linux
Shared Resources Returns the shared resources on a computer system running Windows. Can be a disk drive, printer, interprocess communication, or other shareable device. Windows
Sharing Preferences Returns OS X sharing preferences. Mac
SIP Configuration Returns Apple's System Integrity Protection (rootless) status. Mac
Startup Items

Returns applications and binaries set as user/login startup items. This table isn't currently available in our API documentation. You can access it from the /systeminsights/startup_items endpoint.

Mac, Windows
System Controls Returns the system information for identification. Linux, Mac, Windows
System Info Returns the system information for identification. Linux, Mac, Windows
Uptime Returns the time passed since last boot. Linux, Mac, Windows
USB Devices Returns USB devices that are actively plugged in to the host system. Data only available in the API. Linux, Mac
User Groups Returns the local system user group relationships. Linux, Mac, Windows
Users Returns the list of local user accounts. Data only available in the API. Linux, Mac, Windows
User SSH Keys Returns the encrypted state for private keys in the user's ~/.ssh directory. Linux, Mac
WiFi Networks

Returns the known and remembered WiFi networks. You can access it from the /systeminsights/wifi_networks endpoint. Data only available in the API.

Mac
WiFi Status

Returns the Mac WiFi status. You can access it from the /systeminsights/wifi_status endpoint. Data only available in the API.

Mac
Windows Security Products

Returns the registered Windows security products. You can access it from the /systeminsights/windows_security_products endpoint. Data only available in the API.

Windows

Using and Viewing System Insights Data

After you’ve enabled System Insights for your organization's devices, you can use the  and the  module to query and report on System Insights information. 

Prerequisites:

  • System Insights must be enabled on a device for the System Insights section to appear under the Device panel Details tab.

To view System Insights data for a device:

  1. Go to Devices.
  2. Select a device that has System Insights enabled, and select the Insights tab.
  3. From here, sub-tabs provide extra navigation.

The Summary tab shows the following data:

  • Device Usage
    • Status: active or inactive
    • Last Contact: last activity from the device
    • Uptime: The number of days since the device was last rebooted.
    • Memory: The amount of RAM or memory installed on the device.
    • Storage Available: The amount of storage space available in the device's largest partition. 
    • Disk Encrypted: Whether disk encryption (BitLocker, FileVault, or Linux Encryption) is enabled for the device.
  • Local Device Accounts
  • Hardware: Information on the device hardware, such as operating system version, architecture, vendor, model, and serial number.
  • Device Info: Information from the agent, such as Instance ID, System ID, and agent version. 
  • Network: Information on the hostname, primary, and remote IP addresses.

Retainment of System Insights Data

ºÚÁϺ£½Ç91Èë¿Ú retains System Insights data as long as the device exists within the Admin Portal. When the device is deleted, System Insights data transmission is automatically terminated for that device.

Note:

System Insights collects a single copy of data every 60 minutes, meaning that the data is not live, and is refreshed every hour. For longer data retention, if needed by your org, we recommend migrating the data out of System Insights via ºÚÁϺ£½Ç91Èë¿Ú's System Insights API to a storage space like AWS S3 Bucket or Azure Blob.

See our  or more information.

Back to Top

List IconIn this Article

Still Have Questions?

If you cannot find an answer to your question in our FAQ, you can always contact us.

Submit a Case