ad_ou
aio_agent_build
aks_node_resource_group_id
architecture
az_metadata.compute.location
az_metadata.compute.name
az_metadata.compute.offer
az_metadata.compute.osType
az_metadata.compute.placementGroupId
az_metadata.compute.plan.name
az_metadata.compute.plan.product
az_metadata.compute.plan.publisher
az_metadata.compute.platformFaultDomain
az_metadata.compute.platformUpdateDomain
az_metadata.compute.publicKeys
az_metadata.compute.publisher
az_metadata.compute.resourceGroupName
az_metadata.compute.sku
az_metadata.compute.subscriptionId
az_metadata.compute.tags.${TAG}
az_metadata.compute.version
az_metadata.compute.vmId
az_metadata.compute.vmScaleSetName
az_metadata.compute.vmSize
az_metadata.compute.zone
az_metadata.network.interface
azure.id
azure.instanceid
azure.name
azure.subscriptionid
azure.tags
azure.vmid
azure.vmscalesetname
bios_release_date
bios_vendor
bios_version
blockdevice_${DEVICE}size
blockdevice$blockdevice${DEVICE}model
blockdevice$blockdevice${DEVICE}vendor
blockdevices
boardmanufacturer
boardproductname
boardserialnumber
breeze_agent_id
breeze_agent_uuid
breeze_installer_version
clamav_lastupdate
clamav_signature
clamav_version
clientcert
clientnoop
default_gateway
dhcp_servers.${INTERFACE}
dmi.product.serial_number
domain
ec2_account_id
ec2_autoscaling_target_lifecycle_state
ec2_events_maintenance_history
ec2_events_maintenance_scheduled
ec2_events_recommendations_rebalance
ec2_hibernation_configured
ec2_identity_credentials_ec2_info$info${NUMBER}
ec2_kernel_id
ec2_managed_ssh_keys_signer_${CERT}
ec2_metadata.ami-id
ec2_metadata.ami-launch-index
ec2_metadata.ami-manifest-path
ec2_metadata.autoscaling.target-lifecycle-state
ec2_metadata.block-device-mapping.${DEVICE}
ec2_metadata.events.maintenance.history
ec2_metadata.events.maintenance.scheduled
ec2_metadata.events.recommendations.rebalance
ec2_metadata.hibernation.configured
ec2_metadata.hostname
ec2_metadata.iam.info
ec2_metadata.identity-credentials.ec2.info
ec2_metadata.instance-action
ec2_metadata.instance-id
ec2_metadata.instance-life-cycle
ec2_metadata.instance-type
ec2_metadata.kernel-id
ec2_metadata.local-hostname
ec2_metadata.local-ipv4
ec2_metadata.mac
ec2_metadata.managed-ssh-keys.${CERT}
ec2_metadata.metrics.vhostmd
ec2_metadata.network.interfaces.macs.${MAC}.device-number
ec2_metadata.network.interfaces.macs.${MAC}.interface-id
ec2_metadata.network.interfaces.macs.${MAC}.local-hostname
ec2_metadata.network.interfaces.macs.${MAC}.local-ipv4s
ec2_metadata.network.interfaces.macs.${MAC}.mac
ec2_metadata.network.interfaces.macs.${MAC}.owner-id
ec2_metadata.network.interfaces.macs.${MAC}.security-group-ids
ec2_metadata.network.interfaces.macs.${MAC}.security-groups
ec2_metadata.network.interfaces.macs.${MAC}.subnet-id
ec2_metadata.network.interfaces.macs.${MAC}.subnet-ipv4-cidr-block
ec2_metadata.network.interfaces.macs.${MAC}.vpc-id
ec2_metadata.network.interfaces.macs.${MAC}.vpc-ipv4-cidr-block
ec2_metadata.network.interfaces.macs.${MAC}.vpc-ipv4-cidr-blocks
ec2_metadata.placement.availability-zone
ec2_metadata.placement.availability-zone-id
ec2_metadata.placement.group-name
ec2_metadata.placement.region
ec2_metadata.product-codes
ec2_metadata.profile
ec2_metadata.public-hostname
ec2_metadata.public-ipv4
ec2_metadata.public-keys.0.openssh-key
ec2_metadata.reservation-id
ec2_metadata.security-groups
ec2_metadata.services.domain
ec2_metadata.services.partition
ec2_metadata.source
ec2_metadata.tags.instance.${TAG}
ec2_product_codes
ec2_tags_instance_${TAG}
ec2_userdata
eks_cluster_name
fact_source
facterversion
files.${FILE}.${KEY}
filesystems
fqdn
gce.instance.cpuPlatform
gce.instance.description
gce.instance.disks
gce.instance.hostname
gce.instance.id
gce.instance.image
gce.instance.legacyEndpointAccess.${VERSION}
gce.instance.licenses
gce.instance.machineType
gce.instance.maintenanceEvent
gce.instance.name
gce.instance.networkInterfaces
gce.instance.preempted
gce.instance.remainingCpuTime
gce.instance.scheduling.automaticRestart
gce.instance.scheduling.onHostMaintenance
gce.instance.scheduling.preemptible
gce.instance.serviceAccounts.${ACCOUNT}.aliases
gce.instance.serviceAccounts.${ACCOUNT}.email
gce.instance.serviceAccounts.${ACCOUNT}.scopes
gce.instance.tags
gce.instance.virtualClock.driftToken
gce.instance.zone
gce.project.attributes.${ATTRIBUTE}
gce.project.numericProjectId
gce.project.projectId
gid
hardwareisa
hardwaremodel
id
interfaces
ipaddress6
ipaddress6_${INTERFACE}
ipaddress_${INTERFACE}
is_virtual
java.java.runtime.version
java.java.vendor
java.java.version
java.java.vm.vendor
java.java.vm.version
java.processes
java.running
k8s_node_name
k8s_service_host
k8s_service_port
k8s_tunhub_client
kernel
kernelmajversion
kernelrelease
kernelversion
load_average_1
load_average_15
load_average_5
local_admins
local_users
lsbdistcodename
lsbdistdescription
lsbdistid
lsbdistrelease
lsbmajdistrelease
lsbminordistrelease
lsbrelease
macaddress_${INTERFACE}
manufacturer
memory.swap.available
memory.swap.available_bytes
memory.swap.capacity
memory.swap.total
memory.swap.total_bytes
memory.swap.used
memory.swap.used_bytes
memory.system.available
memory.system.available_bytes
memory.system.capacity
memory.system.total
memory.system.total_bytes
memory.system.used
memory.system.used_bytes
memoryfree
memoryfree_mb
memorysize
memorysize_mb
microsoft_defender_atp_id
microsoft_defender_org_id
microsoft_oms_agent_id
mountpoints.${MOUNTPOINT}.available
mountpoints.${MOUNTPOINT}.available_bytes
mountpoints.${MOUNTPOINT}.capacity
mountpoints.${MOUNTPOINT}.device
mountpoints.${MOUNTPOINT}.filesystem
mountpoints.${MOUNTPOINT}.options
mountpoints.${MOUNTPOINT}.size
mountpoints.${MOUNTPOINT}.size_bytes
mountpoints.${MOUNTPOINT}.used
mountpoints.${MOUNTPOINT}.used_bytes
mtu_${INTERFACE}
netmask_${INTERFACE}
network_${INTERFACE}
networking.mac
node_report_timestamp
operatingsystemmajrelease
os.family
os.lsb.distcodename
os.lsb.distdescription
os.lsb.distid
os.lsb.distrelease
os.lsb.majdistrelease
os.lsb.minordistrelease
os.lsb.release
os.name
os.release.full
os.release.major
os.release.minor
osfamily
partitions.${PARTITION}.filesystem
partitions.${PARTITION}.label
partitions.${PARTITION}.mount
partitions.${PARTITION}.uuid
partitions.${PARTITION}28.label
path
physicalprocessorcount
powershell.installed
processor${NUMBER}
processorcount
productname
proxy.http
proxy.https
ps
puppetversion
receive_time
rhel_subscription.arch
rhel_subscription.ends
rhel_subscription.overall_status
rhel_subscription.product_id
rhel_subscription.product_name
rhel_subscription.starts
rhel_subscription.status
rhel_subscription.system_purpose_status
rhel_subscription.the_yum/dnf_plugins
rhel_subscription.version
rubyplatform
rubysitedir
rubyversion
scan_log4j.count
scan_log4j.findings
scan_log4j.id
scan_log4j.result
scan_log4j.shaded_count
selinux
selinux_config_mode
selinux_config_policy
selinux_current_mode
selinux_enforced
selinux_policyversion
serialnumber
splunk_agent_running
splunk_agent_version
sshd_passwordauthentication
sshd_permitemptypasswords
sshd_permitrootlogin
sshd_permituserenvironment
sshdsakey
sshecdsakey
sshed25519key
sshfp_dsa
sshfp_ecdsa
sshfp_ed25519
sshfp_rsa
sshrsakey
subversion
swapfree
swapfree_mb
swapsize
swapsize_mb
system_uptime.days
system_uptime.hours
system_uptime.seconds
system_uptime.uptime
tags.vmware.service.uuid
tags.vmware.vmid
time_offset.last_check
time_offset.offset
timezone
trendmicro_software
trusted.hostname
type
uniqueid
uptime
uptime_days
uptime_hours
uptime_seconds
uuid
vlans
vulnerability_meltdown_patch_enabled
wazuh_agent_status
yara_last_scan_date
yara_scan_result | ad_ou
aio_agent_build
architecture
az_metadata.compute.location
az_metadata.compute.name
az_metadata.compute.offer
az_metadata.compute.osType
az_metadata.compute.placementGroupId
az_metadata.compute.plan.name
az_metadata.compute.plan.product
az_metadata.compute.plan.publisher
az_metadata.compute.platformFaultDomain
az_metadata.compute.platformUpdateDomain
az_metadata.compute.publicKeys
az_metadata.compute.publisher
az_metadata.compute.resourceGroupName
az_metadata.compute.sku
az_metadata.compute.subscriptionId
az_metadata.compute.tags.${TAG}
az_metadata.compute.version
az_metadata.compute.vmId
az_metadata.compute.vmScaleSetName
az_metadata.compute.vmSize
az_metadata.compute.zone
az_metadata.network.interface
azure.id
azure.instanceid
azure.name
azure.subscriptionid
azure.tags
azure.vmid
azure.vmscalesetname
breeze_agent_id
breeze_agent_uuid
breeze_installer_version
clientcert
clientnoop
default_gateway
disks_space.${DISK}.free_space_gb
disks_space.${DISK}.free_space_perc
disks_space.${DISK}.total_space_gb
disks_space.${DISK}.used_space_perc
dmi.product.serial_number
domain
dot_net.net4_version
ec2_account_id
ec2_autoscaling_target_lifecycle_state
ec2_events_maintenance_history
ec2_events_maintenance_scheduled
ec2_hibernation_configured
ec2_identity_credentials_ec2_info_${NUMBER}
ec2_metadata.ami-id
ec2_metadata.ami-launch-index
ec2_metadata.ami-manifest-path
ec2_metadata.autoscaling.target-lifecycle-state
ec2_metadata.block-device-mapping.${DEVICE}
ec2_metadata.events.maintenance.history
ec2_metadata.events.maintenance.scheduled
ec2_metadata.hibernation.configured
ec2_metadata.hostname
ec2_metadata.iam.info
ec2_metadata.identity-credentials.ec2.info
ec2_metadata.instance-action
ec2_metadata.instance-id
ec2_metadata.instance-life-cycle
ec2_metadata.instance-type
ec2_metadata.local-hostname
ec2_metadata.local-ipv4
ec2_metadata.mac
ec2_metadata.metrics.vhostmd
ec2_metadata.network.interfaces.macs.${MAC}.device-number
ec2_metadata.network.interfaces.macs.${MAC}.interface-id
ec2_metadata.network.interfaces.macs.${MAC}.ipv4-associations.18.158.97.93
ec2_metadata.network.interfaces.macs.${MAC}.local-hostname
ec2_metadata.network.interfaces.macs.${MAC}.local-ipv4s
ec2_metadata.network.interfaces.macs.${MAC}.mac
ec2_metadata.network.interfaces.macs.${MAC}.owner-id
ec2_metadata.network.interfaces.macs.${MAC}.public-hostname
ec2_metadata.network.interfaces.macs.${MAC}.public-ipv4s
ec2_metadata.network.interfaces.macs.${MAC}.security-group-ids
ec2_metadata.network.interfaces.macs.${MAC}.security-groups
ec2_metadata.network.interfaces.macs.${MAC}.subnet-id
ec2_metadata.network.interfaces.macs.${MAC}.subnet-ipv4-cidr-block
ec2_metadata.network.interfaces.macs.${MAC}.vpc-id
ec2_metadata.network.interfaces.macs.${MAC}.vpc-ipv4-cidr-block
ec2_metadata.network.interfaces.macs.${MAC}.vpc-ipv4-cidr-blocks
ec2_metadata.placement.availability-zone
ec2_metadata.placement.availability-zone-id
ec2_metadata.placement.region
ec2_metadata.product-codes
ec2_metadata.profile
ec2_metadata.public-hostname
ec2_metadata.public-ipv4
ec2_metadata.public-keys.0.openssh-key
ec2_metadata.reservation-id
ec2_metadata.security-groups
ec2_metadata.services.domain
ec2_metadata.services.partition
ec2_product_codes
ec2_userdata
fact_source
facterversion
files.${FILE}.${KEY}
fqdn
gce.instance.id
gce.instance.name
gce.instance.zone
gce.project.projectId
hardwareisa
hardwaremodel
id
iis_version
interfaces
ipaddress6
ipaddress6_${INTERFACE}
ipaddress_${INTERFACE}
is_virtual
kernel
kernelmajversion
kernelrelease
kernelversion
local_admins
macaddress_${INTERFACE}
manufacturer
memory.system.available
memory.system.available_bytes
memory.system.capacity
memory.system.total
memory.system.total_bytes
memory.system.used
memory.system.used_bytes
memoryfree
memoryfree_mb
memorysize
memorysize_mb
microsoft_defender_atp_id
microsoft_defender_org_id
mtu_${INTERFACE}
netmask_${INTERFACE}
network_${INTERFACE}
networking.mac
node_report_timestamp
operatingsystemmajrelease
os.family
os.name
os.release.full
os.release.major
os.release.minor
osfamily
package_updates_result
path
physicalprocessorcount
powershell.compatible
powershell.installed
powershell.version
processor${NUMBER}
processorcount
productname
proxy.http
proxy.https
ps
puppetversion
receive_time
rubyplatform
rubysitedir
rubyversion
scan_log4j.count
scan_log4j.findings
scan_log4j.id
scan_log4j.result
scan_log4j.shaded_count
serialnumber
splunk_agent_running
splunk_agent_version
sqlserver_features.${VERSION}
sqlserver_instances.${VERSION}.${INSTANCE}.features
sqlserver_instances.${VERSION}.${INSTANCE}.name
sqlserver_instances.${VERSION}.${INSTANCE}.patch_level
sqlserver_instances.${VERSION}.${INSTANCE}.reg_root
sqlserver_instances.${VERSION}.${INSTANCE}.version
sqlserver_instances.${VERSION}.${INSTANCE}.version_friendly
system32
system_uptime.days
system_uptime.hours
system_uptime.seconds
system_uptime.uptime
tags.instance.azure.id
tags.vmware.service.uuid
tags.vmware.vmid
time_offset.last_check
time_offset.offset
timezone
trendmicro_software
trusted.hostname
uptime
uptime_days
uptime_hours
uptime_seconds
vulnerability_meltdown_patch_enabled
wazuh_agent_status
windows_full_version |