Skip to main content

State topic fields

Each topic writes its readings under sparklogs.data.<topic>. The topic page lists every field and its meaning.

TopicWhat it carries
Agent overheadAgent CPU, working set, and handle measurements.
Agent pipelineAgent queue and delivery measurements.
App crashesPer-executable crash recurrence.
Audit policyWindows audit subcategory set and framework.
Collector healthPer-collector health and activity.
Crash dump configCrash dump readiness and recent dump files.
CrashesKernel and application crashes and kernel crash recurrence.
DevicesPresent hardware devices, their status and driver links.
Disk volumesCapacity, trend, protection, and filesystem readings for fixed volumes.
Device driversInstalled driver packages and their changes.
Feed healthPer-feed input and shipping health.
Installed productsInstalled product inventory rows.
Product summaryInstalled-product counts and protection coverage.
Kernel crashesPer-signature kernel crash recurrence.
Kernel driversLoaded kernel and file-system drivers and their changes.
LifecycleHost boots, shutdowns, sleep and wake, and agent starts and stops.
Network adapter IOPer-adapter traffic, error and utilization measurements.
Network adaptersNetwork adapters, their link state and addressing.
Network configurationDefault routes, legacy resolver and machine proxy settings.
Network pathHost-wide transport and IP counters per IP family.
Network sharesLocal shares, paths and permissions.
Host performanceWhole-host CPU, memory and network measurements, plus primary-network moves.
ProcessesPer-process resource use and growth.
Windows servicesService configuration and run state.
Storage device IOPer-device IO activity and response measurements.
Storage devicesPhysical and virtual storage device inventory.
Storage IOPer-volume throughput, queue and latency measurements.
System infoMachine identity and operating-system posture.
Top kernel memoryKernel memory leaders by named bucket.
Top network connectionsTCP payload traffic leaders by process and destination.
Top processesCPU, memory, process I/O and TCP payload leaders.
Volume mapMappings between volumes, partitions, and devices.
VSS shadow storageShadow-copy storage allocation and use.
VSS writersVSS writer identity and state.
Update agent stateUpdate scan activity and freshness.