JumpCloud’s System Insights extends device management by providing telemetry across your fleet of macOS, Windows, and Linux devices. You can easily gather information from JumpCloud-managed devices with our RESTful API and PowerShell Module.
You can use the System Insights feature to:
- Easily take stock of your suite of devices and the state of the machines in your organization.
- See inventory information like vendor, model, serial number, etc.
- Query device endpoints to proactively resolve issues without having to interrupt employees.
- Provide information to auditors proving that devices in your organization are compliant.
- Gather information about device uptime to leverage when diagnosing issues.
- Allow Security and DevOps Teams to interrogate machines to look for security vulnerabilities.
- See which devices are protected by disk encryption and which need to be updated.
Enabling System Insights
- System Insights is included in some of our package plans. See JumpCloud Pricing for information on our package plans.
- To enable System Insights for your account, current customers can contact [email protected]. New customers can contact [email protected].
- System Insights only supports 64-bit operating systems.
To automatically enable System Insights for new devices:
- Under Settings > Features, toggle System Insightson or off.
- Under Auto enable System Insights on new devices, select which devices you’d like to enable this feature. Newly added devices will automatically have System Insights enabled.
Devices that existed in your account prior to turning on auto-enablement require that you manually enable System Insights for an individual device.
- Click Save if these are your only changes.
There are two ways to enable System Insights for an individual device:
From device details:
- Under DEVICE MANAGEMENT > Devices, select a device to view its details.
- On the Device panel, under the device logo, click System Insights Disabled, then select Enable System Insights.
- Click ok to confirm System Insights are enabled.
- Click save device.
From the more actions menu:
- Select a single device from the list view.
- Click more actions, and choose Enable System Insights.
- You are prompted to confirm your selection. Click enable.
To enable System Insights for multiple devices:
- Under DEVICE MANAGEMENT > Devices, select multiple devices by clicking the checkbox for each appropriate device.
- Click more actions, then select Enable System Insights.
To re-enable System Insights after previously disabling System Insights for your organization:
- Under Settings, toggle System Insights to on.
- You are prompted to confirm your selection. Click ok.
Data That System Insights Collects
System Insights collects the following data from your systems.
Every request for system insights data reports the collection_time, which is the timestamp the data was collected from the system. Data is collected every hour. Offline systems report the last known state when they went offline.
This includes vital information about:
- Users and groups
- Hardware and disk utilization
- Applications and browser extensions
- Encryption settings and software versioning
The following table describes the data categories System Insights gathers by system.
SI Data Categories
|System Insights Category||Windows||Mac||Linux|
|System Info and Hardware||
|Users and Groups||
The following table describes the specific data System Insights gathers by system.
Data available as of June 23, 2020:
|ALF||Returns the OS X Application Layer Firewall (ALF) service details.||Mac|
Returns Application Layer Firewall (ALF) service exceptions. You can access it from the 2.0 /systeminsights/alf_exceptions endpoint. Data only available in the API.
|ALF Explicit Auths||
Returns Application Layer Firewall (ALF) services explicity allowed to perform networking. You can access it from the 2.0 /systeminsights/alf_explicit_auths endpoint. Data only available in the API.
|Application Compatibility Shims||
Returns Application Compatibility Shim information from the registry. You can access it from the 2.0 /systeminsights/appcompat_shims endpoint. Data only available in the API.
|Applications||Returns the OS X applications installed in known search paths, such as /Applications.||Mac|
Returns the authorized_keys table. You can access it from the 2.0 /systeminsights/authorized_keys endpoint. Data only available in the API.
Returns the Windows system's network state. You can access it from the 2.0 /systeminsights/connectivity endpoint. Data only available in the API.
|Battery||Provides information about a MacBook's internal library. Data only available in the API.||Mac|
|BitLocker Info||Returns BitLocker status.||Windows|
|Browser Plugins||Returns all C/NPAPI browser plugin details for all users.||Mac|
Returns all the Certificate Authorities installed in Keychains/ca-bundles.
This table isn't currently available in our API documentation. You can access it from the 2.0 /systeminsights/certificates endpoint.
|Chrome Extensions||Returns the Chrome browser extension.||Linux, Mac, Windows|
|Crashes||Returns Application, System, and Mobile App crash logs.||Mac|
Returns all configured printers. This table isn't currently available in our API documentation. You can access it from the 2.0 /systeminsights/cups_destination endpoint. Data only available in the API.
|Disk Encryptions||Returns the disk encryption status and information.||Linux, Mac|
|Disk Info||Returns basic information about a system's physical disks. Data only available in the API.||Windows|
Returns DNS resolvers used by the host. You can access it from the 2.0 /systeminsights/dns_resolvers endpoint. Data only available in the API.
|/etc/hosts||Returns a line-parsed /etc/hosts.||Linux, Mac, Windows|
|Firefox Add-ons||Returns Firefox browser extensions, webapps, and addons.||Linux, Mac|
|Groups||Returns the local system group. Data only available in the API.||Linux, Mac, Windows|
|IE Extensions||Returns Internet Explorer browser extensions for Windows. Data only available in the API.||Windows|
|Interface Addresses||Returns network interfaces and relevant data.||Linux, Mac, Windows|
Returns detailed information and stats of network interfaces. This table isn't currently available in our API documentation. You can access it from the 2.0 /systeminsights/interface_details endpoint.
|Linux, Mac, Windows|
|Kernel Info||Returns basic active kernel information.||Linux, Mac, Windows|
|Launchd||Returns the LaunchAgents and LaunchDaemons from default search paths.||Mac|
|Logical Drives||Returns details for logical drives on the system. A logical drive generally represents a single partition.||Windows|
|Logged In Users||Returns users with an active shell on the system. Data only available in the API.||Linux, Mac, Windows|
|Managed Policies||Returns the managed configuration policies from AD, MDM, MCX, and more. Data only available in the API.||Mac|
|Mounts||Returns the system mounted devices and file systems.||Linux, Mac|
|OS Version||Returns the operating system version name and version.||Linux, Mac, Windows|
|Patches||Returns all the patches applied. Doesn't include patches via MSI or that are downloaded from Windows Update Service Packs.||Windows|
|Programs||Returns programs installed by Windows Installer. Some fields may be blank.||Windows|
|Packages||Returns installed deb and rpm packages, version, release or revision, maintainer or vendor, and install date.||Linux|
Returns the Python packages installed in a system. Currently, only Python 2 is supported. This table isn't currently available in our API documentation. You can access it from the 2.0 /systeminsights/python_packages endpoint. Data only available in the API.
|Linux, Mac, Windows|
|Safari Extensions||Returns Safari browser extensions. Currently, macOS Mohave and Catalina aren't supported.||Mac|
Returns all of the tasks in the Windows Task Scheduler. This table isn't currently available in our API documentation. You can access it from the 2.0 /systeminsights/scheduled_tasks endpoint.
Returns all installed Windows services their and relevant data. This table isn't currently available in our API documentation. You can access it from the 2.0 /systeminsights/services endpoint.
|Shadow||Returns meta information about local system user encrypted passwords.||Linux|
|Shared Resources||Returns the shared resources on a computer system running Windows. Can be a disk drive, printer, interprocess communication, or other shareable device.||Windows|
|Sharing Preferences||Returns OS X sharing preferences.||Mac|
|SIP Configuration||Returns Apple's System Integrity Protection (rootless) status.||Mac|
Returns applications and binaries set as user/login startup items. This table isn't currently available in our API documentation. You can access it from the 2.0 /systeminsights/startup_items endpoint.
|System Controls||Returns the system information for identification.||Linux, Mac, Windows|
|System Info||Returns the system information for identification.||Linux, Mac, Windows|
|Uptime||Returns the time passed since last boot.||Linux, Mac, Windows|
|USB Devices||Returns USB devices that are actively plugged in to the host system. Data only available in the API.||Linux, Mac|
|User Groups||Returns the local system user group relationships.||Linux, Mac, Windows|
|Users||Returns the list of local user accounts. Data only available in the API.||Linux, Mac, Windows|
|User SSH Keys||Returns the encrypted state for private keys in the user's ~/.ssh directory.||Linux, Mac|
Returns the known and remembered WiFi networks. You can access it from the 2.0 /systeminsights/wifi_networks endpoint. Data only available in the API.
Returns the Mac WiFi status. You can access it from the 2.0 /systeminsights/wifi_status endpoint. Data only available in the API.
|Windows Security Products||
Returns the registered Windows security products. You can access it from the 2.0 /systeminsights/windows_security_products endpoint. Data only available in the API.
Using and Viewing System Insights Data
- System Insights must be enabled on a device for the System Insights section to appear under the Device panel Details tab.
To view System Insights data for a device:
- Go to Devices.
- Select a device that has System Insights enabled.
- On the Device’s Details tab, expand the System Insights Section.
The System Insights Section shows the following data:
- Uptime: The number of days since the device was last rebooted.
- Memory: The amount of RAM or memory installed on the device.
- Storage Available: The amount of storage space available in the device’s largest partition.
- Disk Encryption: Status of encryption of the OS volume. The possible statuses are:
- Encrypted (Suspended)
- Encryption Paused (XX%)
- Decryption Paused (XX%)
- Disk Encrypted: Whether disk encryption (BitLocker) is enabled for the device.
- Hardware: Information on the device hardware, such as operating system version, architecture, vendor, model, and serial number.
- Device Info: Information from the agent, such as Instance ID, System ID, and agent version.
- Network: Information on the hostname, primary, and remote IP addresses.
- Details: The Details section shows table information for the selected device. Note: To view information for a specific table, choose a table from the System Info menu.
Retainment of System Insights Data
JumpCloud retains System Insights data as long as the device exists within the Admin Portal. When the device is deleted, System Insights data transmission is automatically terminated for that device.
System Insights collects a single copy of data every 60 minutes, meaning that the data is not live, and is refreshed every hour. For longer data retention, if needed by your org, we recommend migrating the data out of System Insights via JumpCloud's System Insights API to a storage space like AWS S3 Bucket or Azure Blob.
See our API docs or more information.