State topic fields
Each topic writes its readings under sparklogs.data.<topic>. The topic page lists every field and its meaning.
| Topic | What it carries |
|---|---|
| Agent overhead | Agent CPU, working set, and handle measurements. |
| Agent pipeline | Agent queue and delivery measurements. |
| App crashes | Per-executable crash recurrence. |
| Audit policy | Windows audit subcategory set and framework. |
| Collector health | Per-collector health and activity. |
| Crash dump config | Crash dump readiness and recent dump files. |
| Crashes | Kernel and application crashes and kernel crash recurrence. |
| Devices | Present hardware devices, their status and driver links. |
| Disk volumes | Capacity, trend, protection, and filesystem readings for fixed volumes. |
| Device drivers | Installed driver packages and their changes. |
| Feed health | Per-feed input and shipping health. |
| Installed products | Installed product inventory rows. |
| Product summary | Installed-product counts and protection coverage. |
| Kernel crashes | Per-signature kernel crash recurrence. |
| Kernel drivers | Loaded kernel and file-system drivers and their changes. |
| Lifecycle | Host boots, shutdowns, sleep and wake, and agent starts and stops. |
| Network adapter IO | Per-adapter traffic, error and utilization measurements. |
| Network adapters | Network adapters, their link state and addressing. |
| Network configuration | Default routes, legacy resolver and machine proxy settings. |
| Network path | Host-wide transport and IP counters per IP family. |
| Network shares | Local shares, paths and permissions. |
| Host performance | Whole-host CPU, memory and network measurements, plus primary-network moves. |
| Processes | Per-process resource use and growth. |
| Windows services | Service configuration and run state. |
| Storage device IO | Per-device IO activity and response measurements. |
| Storage devices | Physical and virtual storage device inventory. |
| Storage IO | Per-volume throughput, queue and latency measurements. |
| System info | Machine identity and operating-system posture. |
| Top kernel memory | Kernel memory leaders by named bucket. |
| Top network connections | TCP payload traffic leaders by process and destination. |
| Top processes | CPU, memory, process I/O and TCP payload leaders. |
| Volume map | Mappings between volumes, partitions, and devices. |
| VSS shadow storage | Shadow-copy storage allocation and use. |
| VSS writers | VSS writer identity and state. |
| Update agent state | Update scan activity and freshness. |