 | IBM Endpoint Manager Inspectors Reference |
| IBM Endpoint Manager Inspectors Reference |
Win: Windows
Lin: Red Hat and SUSE Linux
Sol: SUN Solaris
HPUX: Hewlett-Packard UNIX version
AIX: IBM AIX
Mac: Apple Macintosh
Ubu: Ubuntu/Debian
WM: Windows Mobile
The version (e.g. Lin:8.1) corresponds to the version of the IEM product (8.1) in which the inspector was introduced in the client on that platform.
The version number is not shown if it is less than 8.0.
These are the keywords available for querying various aspects of the system, including the name and version of the operating sytem. This chapter also covers the keywords used to describe the vendors and types of the various processors that coexist in a typical computer system. Some of these Inspectors are system-specific, but are included to provide cross-platform compatibility.
service pack with multiplicityCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
service packCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
technology level with multiplicityCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
technology levelCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
fileset version record with multiplicityCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
fileset version recordCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
fileset version requirementCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
grub block listCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
grub bootable imageCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
grub color pairCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
grub color schemeCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
grub colorCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
grub config fileCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
grub deviceCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
grub file locationCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
grub image choiceCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
grub kernelCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
grub moduleCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
smf fmriCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
smf instanceCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
smf property groupCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
smf propertyCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
smf serviceCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
smf snapshot partCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
smf snapshotCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
smf timeCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
smf valueCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
smfCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
aparCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
biosCreation Methods| Declaration | Description | Platforms (?) |
| <bios> | Create the bios object | Win, Lin, Sol, HPUX, AIX, Mac, Ubu:8.1 |
Properties| Declaration | Return type | Description | Platforms (?) |
| <bios> | <bios> | Create the bios object | Win, Lin, Sol, HPUX, AIX, Mac, Ubu:8.1 |
| <bios> as string | <string> | This Windows-only Inspector returns a string that is the concatenation of the BIOS name and date. On a non-Windows operating system, it returns FALSE. | Win, Lin, Sol, HPUX, AIX, Mac, Ubu:8.1 |
| date of <bios> | <string> Plural: dates | This Windows-only Inspector returns the date string stored in the bios. This string is formatted as MM/DD/YY. On a non-Windows operating system, it returns FALSE. | Win, Lin, Sol, HPUX, AIX, Mac, Ubu:8.1 |
| version of <bios> | <string> Plural: versions | This Windows-only Inspector returns the first string of the multi-string version stored in the bios. This string may not exist. The format depends upon your BIOS manufacturer. On a non-Windows operating system, it returns FALSE. | Win, Lin, Sol, HPUX, AIX, Mac, Ubu:8.1 |
| version string of <bios> | <string> Plural: version strings | Win:8.2 |
operating systemCreation Methods| Declaration | Description | Platforms (?) |
| operating system | Returns the operating system object. See operating system. | Win, Lin, Sol, HPUX, AIX, Mac, WM, Ubu:8.1 |
Properties| Declaration | Return type | Description | Platforms (?) |
| <operating system> as string | <string> | Returns a string containing the name of the operating system concatenated with the release. | Win, Lin, Sol, HPUX, AIX, Mac, WM, Ubu:8.1 |
| architecture of <operating system> | <string> Plural: architectures | Returns the architecture of the operating system. This is the value of the 'machine' element of the utsname structure obtained by calling uname. | Win:8.2, Lin, Sol, HPUX, AIX, Mac, Ubu:8.1 |
| boot time of <operating system> | <time> Plural: boot times | Returns the time of the last restart. | Win, Lin, Sol, HPUX, AIX, Mac, Ubu:8.1 |
| build number high of <operating system> | <integer> Plural: build number highs | Numeric representation of the most significant 16 bits of the build number. | Win, WM |
| build number low of <operating system> | <integer> Plural: build number lows | Numeric representation of the least significant 16 bits of the build number. | Win, WM |
| build number of <operating system> | <integer> Plural: build numbers | This Inspector returns the build number of the specified OS. On Windows, the Inspector returns an integer. This is the value of the dwBuildNumber member of the OSVERSIONINFO structure returned by the GetVersionEx Windows API. | Win |
| csd version of <operating system> | <string> Plural: csd versions | Returns the Corrective Service Disk version of the operating system. The szCSDVersion as returned by the GetVersionEx system call. The format varies depending on the installed service packs. For WinNT it contains a string such as "Service Pack 3", for Win95 it can contain a string such as "B". | Win, WM |
| ia64 of <operating system> | <boolean> Plural: ia64s | Returns TRUE iff the BES Client is running on Itanium. | Win, WM |
| mac of <operating system> | <boolean> Plural: macs | Returns TRUE if the client computer is a Macintosh. | Win:8.0, Lin:8.0, Sol:8.0, HPUX:8.0, AIX:8.0, Mac:8.0, Ubu:8.1 |
| major version of <operating system> | <integer> Plural: major versions | Returns integer which is the dwMajorVersion returned by the GetVersionEx system call. Note that while the WinNT major version tracks the release (3 for 3.51, 4 for 4.0, and 5.0 for Windows 2000, 5.1 for Windows XP), the major version for Win95 and Win98 is always 4. | Win, WM |
| metric <integer> of <operating system> | <integer> Plural: metrics | This inspector uses the windows GetSystemMetrics API. The integer constants and their meaning are defined by Microsoft. For example, the integer 87 indicates that the operating system is a media center edition. The integer constants are defined in WinUser.h. | Win |
| minor version of <operating system> | <integer> Plural: minor versions | Numeric representation of the minor version of the operating system. | Win, WM |
| name of <operating system> | <string> Plural: names | Returns the name of the operating system as a string. Names might include Win98, WinNT, etcetera. | Win, Lin, Sol, HPUX, AIX, Mac, WM, Ubu:8.1 |
| performance counter frequency of <operating system> | <hertz> Plural: performance counter frequencies | The rate at which the performance counter is being incremented (per second). | Win, WM |
| performance counter of <operating system> | <integer> Plural: performance counters | Retrieves a 64-bit performance counter value. | Win, WM |
| platform id of <operating system> | <integer> Plural: platform ids | Returns the dwPlatformId as returned by the GetVersionEx system call. Possible values are 1 (Win95/95) and 2 (WinNT). | Win, WM |
| product info numeric of <operating system> | <integer> Plural: product info numerics | This Windows-specific inspector returns the integer from the Windows GetProductInfo API. The inspector only provides meaningful results for Windows Vista and newer versions of the OS. The major/minor version of the OS must be 6.0 or greater for the result to be meaningful. For more information, refer to the Microsoft article at http://msdn2.microsoft.com/en-us/library/ms724358(VS.85).aspx. | Win, WM |
| product info string of <operating system> | <string> Plural: product info strings | On Windows versions 6.0 and newer (Vista minimum), this inspector returns a string derived from the GetProductInfo API. It will be one of the following values:UnlicensedBusinessCluster ServerServer DatacenterServer Datacenter CoreEnterpriseServer EnterpriseServer Enterprise CoreServer Enterprise ItaniumHome BasicHome ServerServer for Small BusinessSmall Business ServerSmall Business Server PremiumServer StandardServer Standard CoreStarterStorage Server EnterpriseStorage Server StandardStorage Server WorkgroupUltimateWeb ServerUnknown. | Win, Mac:8.2, WM |
| product type of <operating system> | <operating system product type> Plural: product types | Returns the product type of the operating system, which includes Workstations, Domain Controllers and Servers. | Win, WM |
| release of <operating system> | <string> Plural: releases | Information about the release of the operating system, formatted as a <version> on the Macintosh, but a <string> on UNIX and Windows. | Win, Lin, Sol, HPUX, AIX, Mac, WM, Ubu:8.1 |
| service pack major version of <operating system> | <integer> Plural: service pack major versions | Returns the major version number of the current service pack of the specified OS. | Win, WM |
| service pack minor version of <operating system> | <integer> Plural: service pack minor versions | Returns the minor version number of the current service pack of the specified OS. | Win, WM |
| suite mask of <operating system> | <operating system suite mask> Plural: suite masks | Returns the bit-mapped suite mask for the operating system, which contains further fine-grain information about the version. | Win, WM |
| unix of <operating system> | <boolean> Plural: unixes | Returns TRUE if the local computer is a UNIX system. | Win:8.0, Lin:8.0, Sol:8.0, HPUX:8.0, AIX:8.0, Mac:8.0, Ubu:8.1 |
| uptime of <operating system> | <time interval> Plural: uptimes | Returns a time interval that represents the elapsed time since the operating system was last booted. Note: Depending on the notebook, this interval may not include time spent in hibernation. | Win, Lin, Sol, HPUX, AIX, Mac, Ubu:8.1 |
| version of <operating system> | <version> Plural: versions | Returns the version of the operating system. | Win:8.0, Lin:8.2, Sol:8.2, HPUX:8.2, AIX:8.2, Mac:8.0, Ubu:8.2 |
| windows of <operating system> | <boolean> Plural: windowses | Returns TRUE if the local computer is a Windows system. | Win:8.0, Lin:8.0, Sol:8.0, HPUX:8.0, AIX:8.0, Mac:8.0, Ubu:8.1 |
| x64 of <operating system> | <boolean> Plural: x64s | Returns TRUE if the current operating system is 64-bits. | Win, WM |
cpupackageCreation Methods| Declaration | Description | Platforms (?) |
| cpupackage | Win:8.2, Lin:8.2, Sol:8.2, HPUX:8.2, AIX:8.2, Mac:8.2, Ubu:8.2 |
Properties| Declaration | Return type | Description | Platforms (?) |
| core of <cpupackage> | <integer> | Returns the number of physical cores in a single cpupackage (a single socket or physical CPU) | Win:8.2, Lin:8.2, Sol:8.2, HPUX:8.2, AIX:8.2, Mac:8.2, Ubu:8.2 |
| count of <cpupackage> | <integer> | Returns the count of physical cpu packages packages (the number of sockets or physical CPUs). Multiply this number by the number of cores to get the total core count of the system. | Win:8.2, Lin:8.2, Sol:8.2, HPUX:8.2, AIX:8.2, Mac:8.2, Ubu:8.2 |
| smt capable of <cpupackage> | <boolean> | If detectable, returns true if the cpupackage is capable of SMT threads (Simultaneous multithreading, called "Hyper-Threading" on some platforms) | Win:8.2, Lin:8.2, Sol:8.2, HPUX:8.2, AIX:8.2, Mac:8.2, Ubu:8.2 |
| smt enabled of <cpupackage> | <boolean> | If detectable, returns true if the cpupackage is using SMT threads (Simultaneous multithreading, called Hyper-Threading on some platforms) | Win:8.2, Lin:8.2, Sol:8.2, HPUX:8.2, AIX:8.2, Mac:8.2, Ubu:8.2 |
| thread of <cpupackage> | <integer> | Returns the number of SMT threads (Simultaneous multithreading, called Hyper-Threading on some platforms) in a single cpupackage (a single socket or physical CPU) | Win:8.2, Lin:8.2, Sol:8.2, HPUX:8.2, AIX:8.2, Mac:8.2, Ubu:8.2 |
processorCreation Methods| Declaration | Description | Platforms (?) |
| main processor | Returns the processor object corresponding to the main processor. | Win, Lin, Sol, HPUX, AIX, Mac, WM, Ubu:8.1 |
| processor | Returns all the processor objects defined on the machine. See processor. Example: number of processors > 1 - Returns TRUE if the computer is a multi-processor system. | Win, Lin, Sol, HPUX, AIX, Mac, WM, Ubu:8.1 |
| processor <integer> | Returns a processor object for the numbered processor. Processors are numbered from 1. | Win, Lin, Sol, HPUX, AIX, Mac:8.2, WM, Ubu:8.1 |
Properties| Declaration | Return type | Description | Platforms (?) |
| extended feature mask of <processor> | <integer> Plural: extended feature masks | Returns a mask of the extended feature bits of an x86 processor | Ubu:9.0, Lin:9.0, Mac:9.0, Win:9.0 |
| brand id of <processor> | <integer> Plural: brand ids | This inspector returns the integer known as the brand id, returned from the assembly language cpuid extended instruction. | Win, Mac:8.2, WM |
| brand string of <processor> | <string> Plural: brand strings | Returns the vendor-defined brand names for newer processors. | Win, Lin:8.2, Sol:8.2, Mac:8.2, WM, Ubu:8.2 |
| extended family of <processor> | <integer> Plural: extended families | Integer representing the extended family of CPU. See the notes for the meaning of these numbers. | Win, Mac:8.2, WM |
| extended model of <processor> | <integer> Plural: extended models | Integer representing the extended model of CPU. See the notes for the meaning of these numbers. | Win, Mac:8.2, WM |
| family name of <processor> | <string> Plural: family names | Returns the family name of the CPU, dependent on the type of client computer, for instance Pentium, Sparc, PowerPC G4, etcetera. | Win, Lin, Sol, HPUX, AIX, Mac, WM, Ubu:8.1 |
| family of <processor> | <integer> Plural: families | Returns an integer representing the family of the CPU. See the notes for the meaning of these numbers. As of BES 6.0, this Inspector returns a string on Solaris and AIX computers. | Win, Lin, Sol, AIX, Mac:8.2, WM, Ubu:8.1 |
| feature mask of <processor> | <integer> Plural: feature masks | Returns the feature flags from the CPUID instruction. The feature mask contains bits that identify extra features the processor may provide such as MMX support or if the Processor ID is enabled on the processor. | Win, Mac:8.2, WM |
| model of <processor> | <integer> Plural: models | Returns the model number of the CPU.Note: On Solaris, HPUX and AIX computers, this Inspector returns a <string> as of BES 6.0. | Win, Lin, Mac:8.2, WM, Ubu:8.1 |
| speed of <processor> | <hertz> Plural: speeds | Returns the speed of the processor in Hertz. | Win, Lin, Sol, HPUX, AIX, Mac, WM, Ubu:8.1 |
| stepping of <processor> | <integer> Plural: steppings | Returns the stepping number of the processor. This item can be helpful in identifying very specific processor features or limitations. | Win, Lin, Mac:8.2, WM, Ubu:8.1 |
| type of <processor> | <integer> Plural: types | Numeric type of the CPU. Values include: 0 - standard1 - overdrive2 - dual CPU capable3 - reservedNote: this Inspector returns a <string> type as of BES version 6.0 on UNIX machines and version 5.1 on the Macintosh. | Win, WM |
| vendor name of <processor> | <string> Plural: vendor names | The manufacturer of the CPU. Names include: GenuineIntelAuthenticAMDCyrixInsteadCentaurHaulsAmbiguousCPU. | Win, Lin, Mac:8.2, WM, Ubu:8.1 |
ramCreation Methods| Declaration | Description | Platforms (?) |
| ram | Returns a ram object for inspecting the properties of Random Access Memory installed on the machine. See ram. | Win, Lin, Sol, HPUX, AIX, Mac, WM, Ubu:8.1 |
| random access memory | Same as above. | Win, Lin, Sol, HPUX, AIX, WM, Ubu:8.1 |
Properties| Declaration | Return type | Description | Platforms (?) |
| size of <ram> | <integer> Plural: sizes | Returns the number of bytes of random access memory on the current machine. | Win, Lin, Sol, HPUX, AIX, Mac, WM, Ubu:8.1 |
active deviceCreation Methods| Declaration | Description | Platforms (?) |
| active device | Returns a list of all active devices found using the Configuration Manager SetupDiGetClassDevs NT API. Example: number of active devices - Returns the number of active devices as determined by the Configuration Manager. Example: exists active device file "system32\ntoskrnl.exe" - Returns TRUE if ntoskrnl.exe exists in the System32 folder of the Windows folder. Example: exists active device file "C:\WINNT\System32\ntoskrnl.exe" - Returns FALSE because this Inspector path is relative to the Windows directory. | Win |
Properties| Declaration | Return type | Description | Platforms (?) |
| class of <active device> | <string> Plural: classes | Returns the name of the class of the active device provided. | Win |
| description of <active device> | <string> Plural: descriptions | Returns the description of the active device provided. | Win |
| driver key of <active device> | <registry key> Plural: driver keys | The key identified by adding the value of 'driver key value name of active device' to HKLM\System\CurrentControlSet\Control\Class\. | Win |
| driver key value name of <active device> | <string> Plural: driver key value names | Returns the driver key value name of the active device provided. | Win |
| friendly name of <active device> | <string> Plural: friendly names | Returns the friendly name of the active device. | Win |
| hardware id of <active device> | <string> Plural: hardware ids | Returns the hardware id of the active device provided. | Win |
| location information of <active device> | <string> Plural: location informations | Returns a string containing information about the bus location of the device. | Win |
| manufacturer of <active device> | <string> Plural: manufacturers | Returns the manufactures string of the active device. | Win |
| problem id of <active device> | <integer> Plural: problem ids | Configuration manager defined number describing device installation or use problems. Returned by call to CM_Get_DevInst_Status. | Win |
| service key value name of <active device> | <string> Plural: service key value names | Returns the service key value name. | Win |
| status of <active device> | <integer> Plural: statuss | Configuration manager defined status bits conveying device driver status. | Win |
local mssql databaseCreation Methods| Declaration | Description | Platforms (?) |
| local mssql database | Returns local MSSQL database objects. | Win |
| local mssql database <string> | Returns the local Microsoft SQL (MSSQL) database object identified by the name provided. | Win |
Properties| Declaration | Return type | Description | Platforms (?) |
| audit level of <local mssql database> | <integer> Plural: audit levels | Returns the integer audit level of the MSSQL database. | Win |
| has blank sa password of <local mssql database> | <boolean> Plural: has blank sa passwords | Returns TRUE if the MSSQL database sa account has a blank password. | Win |
| instance name of <local mssql database> | <string> Plural: instance names | Returns the name of the MSSQL database. | Win |
| login mode of <local mssql database> | <integer> Plural: login modes | Returns the login mode of the MSSQL database. | Win |
| running of <local mssql database> | <boolean> Plural: runnings | Returns a boolean indicating if the MSSQL database is running. | Win |
serviceCreation Methods| Declaration | Description | Platforms (?) |
| all running service | Returns a list of all running Windows 32 services, such as ATAPI and BESRelay. | Win:8.1 |
| all service | Returns a list of all Windows 32 services, including the BESRelay. | Win:8.1 |
| driver running service | Returns a list of all running Windows 32 system drivers. | Win:8.1 |
| driver service | Returns a list of all Windows 32 system drivers. | Win:8.1 |
| main gather service | Returns a service object for the main gathering service, typically located on the main server.Note: On a Macintosh, returns <nothing>. Included for compatibility. | Win, Lin, Sol, HPUX, AIX, Mac, Ubu:8.1 |
| relay service | Returns a service object for the relay component of BES. Note: On a Macintosh, this returns <nothing>. | Win, Lin, Sol, HPUX, AIX, Mac, Ubu:8.1 |
| running service | Returns all the running service objects. Example: running services - Returns a list of all the currently running services. | Win |
| running service <string> | Returns the running service object matching the name provided. | Win, Lin:8.0, Sol:8.0, HPUX:8.0, AIX:8.0, Ubu:8.1 |
| service | Returns all the service objects. | Win |
| service <string> | Returns the service object matching the name provided, regardless of its running state.On a Macintosh, returns a <dummy> type. | Win, Lin, Sol, HPUX, AIX, Mac, Ubu:8.1 |
| win32 running service | A synonym for 'running service'. This can be any running service from atapi to the BESRelay. | Win:8.1 |
| win32 service | A synonym for 'service'. This can be anything from atapi to the BESRelay. | Win:8.1 |
Properties| Declaration | Return type | Description | Platforms (?) |
| proxy agent service | service Plural: proxy agent services | Returns a service object of the BESProxyAgent if one is present | Ubu:9.0, Lin:9.0, HPUX:9.0, AIX:9.0, Sol:9.0, Win:9.0 |
| <service> as string | <string> | Returns a string containing the Service name, Display name, and State of the service. | Win, Lin:8.2, Sol:8.2, HPUX:8.2, AIX:8.2, Ubu:8.2 |
| can interact with desktop of <service> | <boolean> Plural: can interact with desktops | Indicates the system is configured to allow the service to interact with the desktop. | Win |
| checkpoint of <service> | <integer> Plural: checkpoints | Service specific value indicating its checkpoint state. | Win |
| display name of <service> | <string> Plural: display names | Returns the display name of the service. | Win |
| driver type of <service> | <boolean> Plural: driver types | Returns true if the specified service is a driver type. | Win:8.1 |
| file of <service> | <file> Plural: files | Returns a file object corresponding to the specified <service>. | Win |
| image path of <service> | <string> Plural: image paths | Returns the full path to the service executable. | Win |
| login account of <service> | <string> Plural: login accounts | Returns the login account under which the service is configured to run. | Win |
| running of <service> | <boolean> Plural: runnings | Win:8.2, Lin:8.2, Sol:8.2, HPUX:8.2, AIX:8.2, Ubu:8.2 | |
| security descriptor of <service> | <security descriptor> Plural: security descriptors | This Windows-specific Inspector returns a security descriptor for the specified service. | Win |
| service name of <service> | <string> Plural: service names | Returns the name of the service. | Win |
| service specific exit code of <service> | <integer> Plural: service specific exit codes | Service specific exit code. | Win |
| start type of <service> | <string> Plural: start types | Returns a string that represents the service startup configuration. It describes when the driver is loaded, which can be one of:boot: started by OS loader (usually these are needed to launch the OS).system: started during OS initialization (used by PnP drivers that do device detection after the loader is finished).auto: started by the Service Control Manager (SCM).demand: started on demand, either by PnP manager when a device is enumerated or by the SCM in response to user demand.disabled: can't be started (used to temporarily disable driver services). | Win |
| state of <service> | <string> Plural: states | Returns one of Continuing, Pausing, Paused, Running, Starting, Stopping, Stopped, Unknown. | Win, Lin, Sol, HPUX, AIX, Ubu:8.1 |
| version of <service> | <version> Plural: versions | This Inspector takes the specified service property and retrieves its version (file version). | Win:8.0, Lin:8.0, Sol:8.0, HPUX:8.0, AIX:8.0, Ubu:8.1 |
| win32 exit code of <service> | <integer> Plural: win32 exit codes | Service specific Win32 exit code. | Win |
| win32 type of <service> | <boolean> Plural: win32 types | Returns true if the specified service is a Win32 type. | Win:8.1 |
processCreation Methods| Declaration | Description | Platforms (?) |
| process | Returns all process objects currently running. | Win:8.0, Lin, Sol, HPUX, AIX, Mac, Ubu:8.1 |
| process of <socket> | Returns a <process> representing the local owner of the socket | Ubu:9.0, Lin:9.0, Mac:9.0, HPUX:9.0, AIX:9.0, Win:9.0 |
Properties| Declaration | Return type | Description | Platforms (?) |
| base priority of <process> | <priority class> Plural: base priorities | Refers to the base priority of the process, which determines the order in which threads are scheduled for the processor. The base priority is set by the process code (not the OS), however the OS sets and changes the dynamic priorities of threads in the process within the range of the base. Use the Task Manager to change the base priority of processes. | Win:8.0 |
| creation time of <process> | <time> Plural: creation times | Returns the creation time of the specified process as a time type. | Win:8.0 |
| gdi object count of <process> | <integer> Plural: gdi object counts | Returns the count of the GDI (Graphics Device Interface) objects associated with the specified process as an integer. | Win:8.0 |
| handle count of <process> | <integer> Plural: handle counts | Refers to the number of object handles in the object table of the specified process. | Win:8.0 |
| id of <process> | <integer> Plural: ids | Returns the integer ID of the specified process. | Win:8.0, Lin, Sol, HPUX, AIX, Mac, Ubu:8.1 |
| image file of <process> | <file> Plural: image files | Returns a file object representing the image file used to launch the process. In some cases, this subproperty may not exist. For example, the "System" process does not have an image file. | Win:8.0 |
| io other count of <process> | <integer> Plural: io other counts | Refers to the number of I/O process operations that are neither reads nor writes, including file, network, and device I/O, but excluding I/O directed to the console input object handles. An example might be a control function. | Win:8.0 |
| io other size of <process> | <integer> Plural: io other sizes | Refers to the number of bytes transferred in I/O operations generated by a process including file, network, and device I/Os but excluding reads, writes and bytes directed to the console input object. | Win:8.0 |
| io read count of <process> | <integer> Plural: io read counts | Refers to the number of read I/O operations generated by a process, including file, network, and device I/Os, but excluding I/O reads directed to the console input object handles. | Win:8.0 |
| io read size of <process> | <integer> Plural: io read sizes | Refers to the number of bytes read in I/O operations generated by a process, including file, network, and device I/Os, but excluding read bytes directed to the console input object handles. | Win:8.0 |
| io write count of <process> | <integer> Plural: io write counts | Refers to the number of write I/O operations generated by a process, including file, network, and device I/Os, but excluding I/O writes directed to the console input object handles. | Win:8.0 |
| io write size of <process> | <integer> Plural: io write sizes | Refers to the number of bytes written in I/O operations generated by a process, including file, network, and device I/Os, but excluding write bytes directed to the console input object handles. | Win:8.0 |
| kernel time of <process> | <time interval> Plural: kernel times | Returns the time in kernel mode, as a time interval. | Win:8.0 |
| name of <process> | <string> Plural: names | Returns the name (as a string) of the specified process. | Win:8.0, Lin, Sol, HPUX, AIX, Mac, Ubu:8.1 |
| page fault count of <process> | <integer> Plural: page fault counts | Returns the number of page faults generated by the specified process. | Win:8.0 |
| page file usage of <process> | <integer> Plural: page file usages | Returns the amount of page file space used by the specified process. This value is equal to the VMSize in TaskMgr. | Win:8.0 |
| peak page file usage of <process> | <integer> Plural: peak page file usages | Returns the maximum page file space used throughout the lifetime of the specified process. | Win:8.0 |
| peak working set size of <process> | <integer> Plural: peak working set sizes | Returns the size of the peak working set of the specified process. | Win:8.0 |
| quota nonpaged pool usage of <process> | <integer> Plural: quota nonpaged pool usages | Returns the quota amount of nonpaged pool usage for the specified process. | Win:8.0 |
| quota paged pool usage of <process> | <integer> Plural: quota paged pool usages | Returns the quota amount of paged pool usage for the specified process. | Win:8.0 |
| quota peak nonpaged pool usage of <process> | <integer> Plural: quota peak nonpaged pool usages | Returns the peak quota amount of nonpaged pool usage for the specified process. | Win:8.0 |
| quota peak paged pool usage of <process> | <integer> Plural: quota peak paged pool usages | Returns the peak quota amount of paged pool usage for the specified process. | Win:8.0 |
| session id of <process> | <integer> Plural: session ids | Returns the ID of the session under which the process is running. This requires Win2000 or later and corresponds to the 'Session ID' column in Task Manager. | Win:8.0 |
| user object count of <process> | <integer> Plural: user object counts | Returns the count of USER objects associated with the specified process as an integer. | Win:8.0 |
| user of <process> | <security identifier> Plural: users | Returns a security identifier associated with the user of specified process. This Inspector requires Terminal Services or Win2000+, and may not be available if the inspector application does not have sufficient permissions. This object corresponds to the 'User Name' column in Task Manager. | Win:8.0 |
| user time of <process> | <time interval> Plural: user times | Returns the time in user mode as a time interval. | Win:8.0 |
| working set size of <process> | <integer> Plural: working set sizes | Returns the amount of memory (as an integer number of bytes) required by a process for efficient execution under an operating system that uses paged memory. Thrashing may occur in systems without sufficient memory. This value allow you to monitor the changing memory requirements of the specified process. | Win:8.0 |
| wow64 of <process> | <boolean> Plural: wow64s | Returns a boolean TRUE if the specified process is a 32-bit process running in WOW64 compatibility mode. Always returns FALSE on pre-WinXP SP2. | Win:8.0 |
swapCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
languageCreation Methods| Declaration | Description | Platforms (?) |
| system locale | Determines which bitmap fonts, and OEM, ANSI, and MAC code pages are defaults for the system. This only affects applications that are not fully Unicode. | Win, Lin, Sol, HPUX, AIX, WM, Ubu:8.1 |
| system ui language | Determines the default language of menus and dialogs, messages and help files. | Win, Lin, Sol, HPUX, AIX, WM, Ubu:8.1 |
| user locale | Determines which settings are used for formatting dates, times, currency, and numbers as a default for each user. Also determines the sort order for sorting text. | Win, WM |
| user ui language | Non-MUI: Same as system UI Language.MUI: Determines the language of menus and dialogs, messages, and help files. | Win, WM |
Properties| Declaration | Return type | Description | Platforms (?) |
| <language> as string | <string> | Returns the language of the system locale. | Win, Lin, Sol, HPUX, AIX, WM, Ubu:8.1 |
| primary language of <language> | <primary language> Plural: primary languages | Extracts the primary language identifier from a language. | Win, Lin, Sol, HPUX, AIX, WM, Ubu:8.1 |
primary languageCreation Methods| Declaration | Description | Platforms (?) |
| primary language of <language> | Extracts the primary language identifier from a language. | Win, Lin, Sol, HPUX, AIX, WM, Ubu:8.1 |
Properties| Declaration | Return type | Description | Platforms (?) |
| <primary language> as string | <string> | Returns the primary language. | Win, Lin, Sol, HPUX, AIX, WM, Ubu:8.1 |
computerCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
registryrootCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
registrynodeCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
scsibusCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
scsideviceCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
sound volumeCreation Methods| Declaration | Description | Platforms (?) |
Operators| Declaration | Return Type | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
stereo volumeCreation Methods| Declaration | Description | Platforms (?) |
Operators| Declaration | Return Type | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
usbCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
runlevelCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
operating system product typeCreation Methods| Declaration | Description | Platforms (?) |
| nt domain controller product type | Returns an object corresponding to OS product type of nt domain controller. | Win |
| nt server product type | Returns an object corresponding to OS product type of nt server. | Win |
| nt workstation product type | Returns an object corresponding to OS product type of nt workstation. | Win |
| operating system product type <integer> | Returns an object corresponding to the numbered OS product type. | Win, WM |
| product type of <operating system> | Returns the product type of the operating system, which includes Workstations, Domain Controllers and Servers. | Win, WM |
Operators| Declaration | Return Type | Description | Platforms (?) |
| <operating system product type> = <operating system product type> | <boolean> | Compare two operating system product types for equality. | Win, WM |
Properties| Declaration | Return type | Description | Platforms (?) |
event logCreation Methods| Declaration | Description | Platforms (?) |
| application event log | Returns the object corresponding to the application event log, which records certain application events, such as the failure of MS SQL to access a database. Example: description of record (oldest record number of it) of application event log - Returns a description of the oldest record in the application event log. | Win |
| event log <string> | Returns the named event log, which contains historical information that help to track down system and security problems. There are several distinct logs that you can specify, including:Application log: records application eventsSecurity log: recirds global or local policy audit eventsSystem log: records OS events. Example: exists event log "Application" - Returns TRUE if the application log exists. | Win |
| security event log | Returns a security event log, which records global or local group policy events. | Win |
| system event log | Returns a system event log, which records OS or component events, such as the failure of a bootup service. | Win |
Properties| Declaration | Return type | Description | Platforms (?) |
| oldest record number of <event log> | <integer> Plural: oldest record numbers | Returns an integer corresponding to the oldest record number on the Client computer's event log. | Win |
| record <integer> of <event log> | <event log record> Plural: records | Returns the nth record corresponding to the specified event log. | Win |
| record count of <event log> | <integer> Plural: record counts | Returns the record count for the specified event log. | Win |
| record of <event log> | <event log record> Plural: records | Returns the record corresponding to the specified event log, for instance the application or system event log. | Win |
event log recordCreation Methods| Declaration | Description | Platforms (?) |
| record <integer> of <event log> | Returns the nth record corresponding to the specified event log. Example: exists record (oldest record number of it) of application event log - Returns TRUE if there is an oldest record in the application event log. | Win |
| record of <event log> | Returns the record corresponding to the specified event log, for instance the application or system event log. Example: exists records of application event log - Returns TRUE if the application event log contains any records. | Win |
Properties| Declaration | Return type | Description | Platforms (?) |
| category of <event log record> | <integer> Plural: categories | Returns the category of the specified event log, which is sometimes used to further describe the related action. | Win |
| computer of <event log record> | <string> Plural: computers | Returns the name of the computer that has entered a record in the specified log. | Win |
| description of <event log record> | <string> Plural: descriptions | Returns a human-readable description of the specified event log record. | Win |
| event id of <event log record> | <integer> Plural: event ids | Returns an integer corresponding to the ID of the specified record in the Client computer's event log. | Win |
| event type of <event log record> | <event log event type> Plural: event types | Returns the type of the specified event log record, such as error, warning, information, and others. | Win |
| length of <event log record> | <integer> Plural: lengths | Returns the length of the specified record. This is not the same as the length of the description. | Win |
| record number of <event log record> | <integer> Plural: record numbers | Returns the integer value of the record number corresponding to the specified event log record. | Win |
| source of <event log record> | <string> Plural: sources | Returns the source name (from the application, service, or component that logged the event) of the specified event log record. | Win |
| time generated of <event log record> | <time> Plural: times generated | Returns the time that the specified event log record was generated. | Win |
| time written of <event log record> | <time> Plural: times written | Returns the time that the specified event record was written to the log. | Win |
| user sid of <event log record> | <security identifier> Plural: user sids | Returns the user security ID for the specified record in the event log. | Win |
event log event typeCreation Methods| Declaration | Description | Platforms (?) |
| audit failure event log event type | Returns an object corresponding to an audit failure -- an event related to the failed execution of an action. Example: audit failure event log event type= event type of record (oldest record number of it) of application event log - Returns TRUE if the oldest record of the application event log contains an audit failure. | Win |
| audit success event log event type | Returns an object corresponding to an audit success in an event log. | Win |
| error event log event type | Returns an object corresponding to an error in the event log, such as the failure of a service to start. Example: error event log event type= event type of record (oldest record number of it) of application event log - Returns TRUE if the oldest record of the application event log contains an error. | Win |
| event log event type <integer> | Returns an event type object corresponding to the specified number. The enumerated types include:1: error event2: warning event4: information event8: audit success event16: audit failure event. | Win |
| information event log event type | Returns an object corresponding to an information event -- An informational event which is generally related to a successful action. | Win |
| warning event log event type | Returns an object corresponding to a warning in the event log. Warnings can be used to prevent future system problems. | Win |
| event type of <event log record> | Returns the type of the specified event log record, such as error, warning, information, and others. | Win |
Operators| Declaration | Return Type | Description | Platforms (?) |
| <event log event type> = <event log event type> | <boolean> | Compare two event log event types for equality. | Win |
Properties| Declaration | Return type | Description | Platforms (?) |
zoneCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
zone network interfaceCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
uuidCreation Methods| Declaration | Description | Platforms (?) |
Operators| Declaration | Return Type | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |
uuid with multiplicityCreation Methods| Declaration | Description | Platforms (?) |
Properties| Declaration | Return type | Description | Platforms (?) |