Objects

Objects represent items recognized by Nexthink.

User

Users of devices (domain, local, or system)

Field

Group

Type

Focus time

Activity

Aggregate

Windows black.png
Mac black.png
Mobile gray disabled.png

Indicates the amount of time any window of an application was in focus during the execution.

  • Example: the time Microsoft Teams is being executed (duration = 5h 10min 48s) will usually be considerably longer compared how long (Focus time = 52min 23s) its window(s) are forefront on the desktop.

NXQL ID:

focus_time

Now available for macOS.

Device

Devices are Windows, Mac OS, or mobile endpoints

Field

Group

Type

Average CPU queue length

Device performance

Aggregate

Windows black.png
Mac gray disabled.png
Mobile gray disabled.png

Indicates the average CPU queue length across all device performance events. Rounding is used for presenting the result as an integer.

NXQL ID:

average_cpu_queue_length

New field

Average CPU usage

Device performance

Aggregate

Windows black.png
Mac gray disabled.png
Mobile gray disabled.png

Indicates the average CPU usage across all device performance events.

NXQL ID:

average_cpu_usage

New field

Average memory usage

Device performance

Aggregate

Windows black.png
Mac gray disabled.png
Mobile gray disabled.png

Indicates the average memory usage of the device across all device performance events.

NXQL ID:

average_memory_usage

New field

Average normalized CPU usage

Device performance

Aggregate

Windows black.png
Mac gray disabled.png
Mobile gray disabled.png

Indicates the average CPU usage across all device performance events. Value is normalized by the number of logical CPUs available.

NXQL ID:

average_normalized_cpu_usage

New field

Average read operations per second

Device performance

Aggregate

Windows black.png
Mac gray disabled.png
Mobile gray disabled.png

Indicates the average number of disk read operations per second across all device performance events.

NXQL ID:

average_read_operations

New field

Average write operations per second

Device performance

Aggregate

Windows black.png
Mac gray disabled.png
Mobile gray disabled.png

Indicates the average number of disk write operations per second across all device performance events.

NXQL ID:

average_write_operations

New field

Focus time

Activity

Aggregate

Windows black.png
Mac black.png
Mobile gray disabled.png

Indicates the amount of time any window of an application was in focus during the execution.

  • Example: the time Microsoft Teams is being executed (duration = 5h 10min 48s) will usually be considerably longer compared how long (Focus time = 52min 23s) its window(s) are forefront on the desktop.

NXQL ID:

focus_time

Now available for macOS.

OS architecture

Operating system

Field

Windows black.png
Mac black.png
Mobile gray disabled.png

Architecture of device operating system (x86/x64/ARM64)

NXQL ID:

os_architecture

ARM64 architecture is now reported.

Application

Sets of executables (e.g. 'Microsoft Office')

Field

Group

Type

Focus time

Activity

Aggregate

Windows black.png
Mac black.png
Mobile gray disabled.png

Indicates the amount of time any window of an application was in focus during the execution.

  • Example: the time Microsoft Teams is being executed (duration = 5h 10min 48s) will usually be considerably longer compared how long (Focus time = 52min 23s) its window(s) are forefront on the desktop.

NXQL ID:

focus_time

Now available for macOS.

Executable

Executable programs (e.g. 'winword.exe')

Field

Group

Type

Focus time

Activity

Aggregate

Windows black.png
Mac black.png
Mobile gray disabled.png

Indicates the amount of time any window of an application was in focus during the execution.

  • Example: the time Microsoft Teams is being executed (duration = 5h 10min 48s) will usually be considerably longer compared how long (Focus time = 52min 23s) its window(s) are forefront on the desktop.

NXQL ID:

focus_time

Now available for macOS.

Binary

Executable binary files (e.g. 'winword.exe - 10.0.6843')

Field

Group

Type

Focus time

Activity

Aggregate

Windows black.png
Mac black.png
Mobile gray disabled.png

Indicates the amount of time any window of an application was in focus during the execution.

  • Example: the time Microsoft Teams is being executed (duration = 5h 10min 48s) will usually be considerably longer compared how long (Focus time = 52min 23s) its window(s) are forefront on the desktop.

NXQL ID:

focus_time

Now available for macOS.

Activities

Activities represent actions performed by Objects

Execution

Executing processes (merged when in close succession)

Field

Group

Type

Focus time

Activity

Field

Windows black.png
Mac black.png
Mobile gray disabled.png

Indicates the amount of time any window of an application was in focus during the execution.

  • Example: the time Microsoft Teams is being executed (duration = 5h 10min 48s) will usually be considerably longer compared how long (Focus time = 52min 23s) its window(s) are forefront on the desktop.

NXQL ID:

focus_time

Now available for macOS.

Session

Sessions of a user logged on a device

Field

Group

Type

Citrix RTT

Session performance

Field

Windows black.png
Mac gray disabled.png
Mobile gray disabled.png

Indicates the maximum Citrix RTT which represents the screen lag experienced by the user.

  • It measures the time between a user input and the display of the response.

  • It includes the network time.

  • The measure is only available for Citrix ICA.

NXQL ID:

citrix_rtt

Not available for macOS.

Client IP

Session performance

Field

Windows black.png
Mac gray disabled.png
Mobile gray disabled.png

Indicates the IP of the client connecting to the session.

NXQL ID:

client_ip

Not available for macOS.

Device ID

Device

Field

Windows black.png
Mac gray disabled.png
Mobile gray disabled.png

Indicates the ID of the device which hosts the session.

Not available for macOS.

Device name

Device

Field

Windows black.png
Mac gray disabled.png
Mobile gray disabled.png

Indicates the name of the device which hosts the session.

Not available for macOS.

Duration

Properties

Field

Windows black.png
Mac gray disabled.png
Mobile gray disabled.png

Indicates the duration of the session performance event.

NXQL ID:

duration

Not available for macOS.

End time

Properties

Field

Windows black.png
Mac gray disabled.png
Mobile gray disabled.png

Indicates the end time.

NXQL ID:

end_time

Not available for macOS.

Session network latency

Session performance

Field

Windows black.png
Mac gray disabled.png
Mobile gray disabled.png

Indicates the maximum session network latency.

  • It measures the performance of the network.

  • When the value is too high, the user will see some screen lag and a degraded user experience.

  • The measure is not available for Console session.

NXQL ID:

session_network_latency

Not available for macOS.

Session protocol

Session performance

Field

Windows black.png
Mac gray disabled.png
Mobile gray disabled.png

Indicates the protocol used to connect to the session. The possible values are:

  • Citrix - ICA

  • VMware - Blast

  • VMware - PCoIP

  • Amazon - PCoIP

  • RDP

  • Local session

  • Multiple: the user connected with different protocols during the timeframe of the event.

NXQL ID:

session_protocol

Not available for macOS and Amazon PCoIP added.

Start time

Properties

Field

Windows black.png
Mac gray disabled.png
Mobile gray disabled.png

Indicates the start time.

NXQL ID:

start_time

Not available for macOS.

User ID

User

Field

Windows black.png
Mac gray disabled.png
Mobile gray disabled.png

Indicates the ID of the user connected to the session.

Not available for macOS.

User name

User

Field

Windows black.png
Mac gray disabled.png
Mobile gray disabled.png

Indicates the name of the user connected to the session.

Not available for macOS.

User SID

User

Field

Windows black.png
Mac gray disabled.png
Mobile gray disabled.png

Indicates the SID of the user connected to the session.

Not available for macOS.