Devices

Device Inventory is similar to the Devices view in Endpoint Troubleshooting, but has extended features you can use to include all device data. Device inventory is available in both Inventory Insights and Endpoint Troubleshooting.

KPI cards

At the top of the page, there are KPI cards displaying the following:

• Devices: Total count of different types of devices across manufacturers and operating systems.
• Critical Devices: Devices whose criticality has been assigned as critical.
• Inactive Devices: Devices that have been offline for 30 days or more.

Filtering and columns

You have the option to filter the page on Device Status as either Online, Offline or All by clicking the drop-down menu on the top right corner of the page. The list shows real-time, detailed information about all 1E devices in your environment.

Run Instructions and view Instruction history

You can search for, and run an instruction against a set of devices, from the Devices page, or 1E Intelligence >Insight > Insights details pages.

• Devices page: Select one or more devices from the device grid, or select Run Instruction from the Device Summary card.

• Intelligence Insight page: Select Investigate on the Insight summary card, refer to Insight details.

Refer to Endpoint Troubleshooting Home page, questions, and responses.

Device View

Selecting a device from the devices page opens its Details which includes real-time response information.

Device Summary card

Gives you an review an overview of the current device.

• Hover over last seen to view its UTC timestamp.

• Customize items on the card by pinning them from device Details. Hover over an item to reveal its pin.

  

Device details

Explore every attribute gathered by the 1E Client for a device. Review each section to get a comprehensive view of the device profile and its current status. You can personalize the display by collapsing sections with the chevrons on each panel and rearranging them using drag and drop.

Device detail menu items

Menu item	Description
Overview	Details: Gain full visibility into the attributes collected by the 1E Client for a device. Environment Variables: Show operating system environment variables. Resource Usage: Examine the CPU, memory, and disk activity on the chart for the last hour. Insights: Displays a table that replicates the insights dashboard. Diagnostics: Enables actionable insights for faster, evidence-based resolution. Refer to Diagnostics.
Downloads	Summary: Download activity and status for the device. Whenever you click on an FQDN on any of the Nomad pages, the Device View will be displayed with the Downloads tab selected. Content: Shows the Contents Titles on the selected device. The default view is from All Sources, All Types and All Status.
Hardware	Disk Drives: Show disk drives, including hardware and usage information. Peripherals: Shows the list of plug and play hardware devices (Windows only).
Software	Normalized Software: View and manage a comprehensive list of all normalized software installed on a device. All Software: Access a complete list of all software installed on a device, including unmatched software. Installations: Shows (per-device) installed software. Windows Services: Shows a list of installed Windows services and their current state. Process History: Shows detailed information about all running processes.
Network	Throughput: Examine the network throughput activity on a device. Interface Configuration: Returns the output from the native network interface configuration command (for example, ipconfig or ifconfig). DNS: Understand the device's DNS status and configuration. TCP Connections: Returns a list of established TCP connections. Listening Ports: Returns a list of processes that are listening for network connections. ARP Cache: Shows the list of entries in the local ARP (Address Resolution Protocol) cache. WiFi : Show a list of visible wifi networks, including basic network properties. Platforms: Windows, macOS.
Patch Insights	Patch Status: View patch status for a device, deploy one or more patches for that device, and view related event logs.
Experience	Application Interaction: Analyze how users interact with applications on a device. User Interaction: Show user interactive sessions with activity over last 30 days. Trends: The Trends tab shows the changes in the scores over time. Logs: The Event Logs tab gives you a listing of the Windows Event log entries for that device. Metrics: Metrics are the data points that are collected by the 1E Client and sent to the 1E server.
Policies	Rules Compliance: Shows a list of the rules applied. Diagnostics: Returns diagnostic information about the policy applied (rules and event subscriptions).
1E Client	Binaries: Shows a list of the binary files in the executable folder of the 1E Client. Configuration File: Shows the full content of the 1E Client configuration file. Extensibility: Shows extensibility objects (modules and providers) loaded by the 1E Client. Local Storage: Shows Data Files and Client Inventory Database Use tiles. Nomad Configuration: Shows all the registry settings for the 1E Nomad Branch service.

Diagnostics

Diagnostics collects minute-level device performance data retained for 14-days, allowing you to investigate issues that occurred in the past, even if they were reported late. This reduces the need for live troubleshooting sessions with end users.

Diagnostics is available for your devices from Device > Overview > Diagnostics.

Metrics

The following metrics are available for device diagnostics.

• CPU Usage & Utilization Trends: Identify spikes and sustained load.

• Memory Usage: Total, physical, virtual, and percentage used.

• Disk I/O Metrics: Read/write activity, queue lengths, and free space.

• Network Activity: Throughput, retransmit rates, Wi-Fi signal quality.

• Reliability Metrics: Crashes, hangs, service failures, shutdowns, and updates.

Timeline

The Diagnostics timeline offers a visual overview of available telemetry across a 14-day period. You can select a four-hour window for deep-dive diagnostics, making it easy to focus investigations on the exact time issues occurred.

• Green: When the device is online and no events or activities are reported.

• Grey: Device is offline.

• Blue: Events and activities have happened related to software, OS, or patch install and uninstall.

• Red: There has been an OS or software failure, hang, or crash for applications.

User application interaction

Diagnostics captures user-level interactions with applications, for example, when apps are opened and actively used.

• Correlate user complaints like “Excel was freezing during my work” with system metrics at that time.

• Provides clarity on whether issues happened during active user activity.

• Enables better root cause validation for tickets tied to user workflows.

Boot metrics and user logon metrics

Diagnostics tracks system startup and shutdown performance, including boot duration.

• Identifies delays in boot processes that impact productivity, for example long startup times on Monday mornings.

• Logs OS upgrades, group policy application, and patch installations that may affect boot behavior.

• Allows you to distinguish between device health issues, policy or configuration issues at boot.

• Helps you respond to common complaints like “my laptop takes forever to start up.”