Skip to main content

Devices

0readings
0conditions
0themes fed
Livestatus

The hardware devices present on the host, with their status, problem codes and links to their drivers.

Topic id: devices.

This topic reports what the host looks like rather than scoring a condition on it. The values it carries are queryable on their own.

Fields (20)​

One row per device present on the host, with its place in the device tree, its status and problem code, and links to its kernel driver and driver package. Software devices with no driver package and print queues are left out; a device with a problem is always listed.

Full inventory every day. Supported changes are reported when the agent observes them.

Device (12)​

sparklogs.data.devices.device
string
The OS's name for this device node, opaque and meaningful only on this host: never parse it. Stable across reboots where the OS gives a stable name. Windows: the device instance id, lowercased.
sparklogs.data.devices.display_name
string
The name the OS shows for this device. Windows: the friendly name, else the device description, in the system language. Absent when the OS has neither.
sparklogs.data.devices.device_type
string
A normalized kind for grouping and icons: processor, storage, network, display, audio, camera, input, usb, bluetooth, printer, portable, power, sensor, security, firmware, port, system, software or other. More values may be added. Windows: from the setup class. Absent when the device has no class.
sparklogs.data.devices.class
string
The Windows setup class. Absent when the device has none, and on other OSes.
sparklogs.data.devices.manufacturer
string
The manufacturer the OS records. Windows: the text in the driver's INF, which can name the driver's author and not the hardware's maker. Absent when there is none.
sparklogs.data.devices.bus
string
Who enumerated this node, a bus or a software enumerator, lowercased (Windows DEVPKEY_Device_EnumeratorName: pci, usb, acpi, root, swd, ...). Not the physical link: a storage device's link is storage_devices.transport.

Driver (2)​

sparklogs.data.devices.kernel_driver
string
Link to the kernel_drivers row of the driver running this device. Absent when there is no such row to link: no driver, or a driver that is part of the OS kernel or runs outside it. Absent is not proof of no driver. A value with no matching row means that driver is not listed now. Windows: the function driver's service.
sparklogs.data.devices.driver_package
string
Link to the drivers row of the package bound to this device. Windows only. Absent when no package is bound.

State (6)​

sparklogs.data.devices.status
string
The device's run state as far as this OS can say: started, not_started, disabled (turned off by an administrator or policy; Windows problem 22), problem. More values may be added. not_started is normal for a device that needs no running driver, and its share differs by OS, so use problem to find faults.
sparklogs.data.devices.problem
string
The OS's name for what is wrong (Windows: the CM_PROB name in snake case; unknown for one this build does not name). Absent is not proof of health on an OS that keeps no record of a failure.
sparklogs.data.devices.problem_code
integer
Device Manager's "Code N". Windows only. Absent when the device node reports no problem, which does not mean the device started: read status for that.
sparklogs.data.devices.problem_status_code
integer
The NTSTATUS behind the problem, when Windows records one. Absent otherwise.
sparklogs.data.devices.problem_status_name
string
The name of problem_status_code, such as STATUS_UNSUCCESSFUL. Absent when the code has no known name.
sparklogs.data.devices.problem_status_space
string
The code table problem_status_code belongs to: ntstatus. Absent with the code.

Example​

Inventory (every day)

7 devices.

sparklogs.data.devices.device: root\vms_vsmp\0000
sparklogs.data.devices.driver_package: driver_package:net/wvms_vsmp.inf/microsoft
sparklogs.data.devices.kernel_driver: kernel_driver:vmsvsmp
sparklogs.data.devices.problem_code: 28
sparklogs.data.devices.status: problem

SparkLogs: CONTEXT, Info, devices: INVENTORY: 7 devices.

Change set

device changed. name="Realtek USB GbE Family Controller" device="usb\vid_0bda&pid_8153\000001000000" status="problem".

sparklogs.data.devices.delta_kind: changed
sparklogs.data.devices.device: usb\vid_0bda&pid_8153\000001000000
sparklogs.data.devices.driver_package: driver_package:net/oem31.inf/realtek
sparklogs.data.devices.kernel_driver: kernel_driver:rtux64w10
sparklogs.data.devices.problem_code: 10
sparklogs.data.devices.status: problem

SparkLogs: CONTEXT, Info, devices: DELTA: device changed. name="Realtek USB GbE Family Controller" device="usb\vid_0bda&pid_8153\000001000000" status="problem".