{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":28730,"path":"it-operations-management/agent-client-collector/agent-client-collector-for-visibility-references.md","title":"Agent Client Collector for Visibility Content reference","bundle":null,"doc_type":null,"release":"australia","body":"\n# Agent Client Collector for Visibility Content reference\n\nReview this information for details on OS query scripts, data collected, and definition of terms.\n\n## OS module scripts for Agent Client Collector for Visibility Content \\(ACC-VC\\)\n\nThese platform-specific plugins invoke platform-specific module scripts. Each script outputs to a standard JSON payload regardless of the platform.\n\n<table id=\"table_dnv_tzy_25b\"><thead><tr><th>\n\nOperating System family/plugin\n\n</th><th>\n\nName of module script\n\n</th></tr></thead><tbody><tr><td rowspan=\"5\">\n\nLinux: acc-f-modules\n\n</td><td>\n\nbasic\\_inventory.rb \\(Starting with ACC-F version 2.10.1, this will not be used.\\)\n\n</td></tr><tr><td>\n\ndata\\_collection.rb\n\n</td></tr><tr><td>\n\nrunning\\_processes.rb\n\n</td></tr><tr><td>\n\ntcp\\_connections.rb\n\n</td></tr><tr><td>\n\n \n\n</td></tr><tr><td rowspan=\"4\">\n\nWindows: acc-f-modules\n\n</td><td>\n\nbasic\\_inventory.rb \\(Starting with ACC-F version 2.10.1, this will not be used.\\)\n\n</td></tr><tr><td>\n\ndata\\_collection.rb\n\n</td></tr><tr><td>\n\nrunning\\_processes.rb\n\n</td></tr><tr><td>\n\ntcp\\_connections.rb\n\n</td></tr><tr><td rowspan=\"3\">\n\nmacOS Operating Systems: acc-f-modules\n\n</td><td>\n\nbasic\\_inventory.rb \\(Starting with ACC-F version 2.10.1, this will not be used.\\)\n\n</td></tr><tr><td>\n\nrunning\\_processes.rb\n\n</td></tr><tr><td>\n\ntcp\\_connections.rb\n\n</td></tr><tr><td rowspan=\"7\">\n\nLinux: acc-visibility-modules\n\n</td><td>\n\ninstalled\\_software.rb\n\n</td></tr><tr><td>\n\nfile\\_systems.rb\n\n</td></tr><tr><td>\n\nstorages\\_devices.rb \\(support for getting physical disk and corresponding disk partitions only\\)\n\n</td></tr><tr><td>\n\nnetwork\\_adapters.rb\n\n</td></tr><tr><td>\n\nlocal\\_users.rb\n\n</td></tr><tr><td>\n\nenhanced\\_inventory.rb\n\n</td></tr><tr><td>\n\ncloud.rb\n\n</td></tr><tr><td rowspan=\"10\">\n\nWindows: acc-visibility-modules\n\n</td><td>\n\ninstalled\\_software.rb\n\n</td></tr><tr><td>\n\nfile\\_systems.rb\n\n</td></tr><tr><td>\n\nstorages\\_devices.rb \\(support for getting physical disk and corresponding disk partitions only\\)\n\n</td></tr><tr><td>\n\nnetwork\\_adapters.rb\n\n</td></tr><tr><td>\n\nlocal\\_users.rb\n\n</td></tr><tr><td>\n\nenhanced\\_inventory.rb\n\n</td></tr><tr><td>\n\ncloud.rb\n\n</td></tr><tr><td>\n\nsam\\_advanced.rb\n\n</td></tr><tr><td>\n\nsam\\_processor.rb\n\n</td></tr><tr><td>\n\nintel\\_ema.rb\n\n</td></tr><tr><td rowspan=\"7\">\n\nmacOS Operating Systems: acc-visibility-modules\n\n</td><td>\n\ninstalled\\_software.rb\n\n</td></tr><tr><td>\n\nfile\\_systems.rb\n\n</td></tr><tr><td>\n\nstorages\\_devices.rb \\(support for getting physical disk and corresponding disk partitions only\\)\n\n</td></tr><tr><td>\n\nnetwork\\_adapters.rb\n\n</td></tr><tr><td>\n\nlocal\\_users.rb\n\n</td></tr><tr><td>\n\nenhanced\\_inventory.rb\n\n</td></tr><tr><td>\n\ncloud.rb\n\n</td></tr></tbody>\n</table>**Note:**\n\nrunning\\_processes.rb and tcp\\_connections.rb are interdependent. For an efficient Discovery, keep both tcp\\_connections.rb and running\\_processes.rb together. Both the files are needed to get the complete data. If one is not there, it will not populate the other data.\n\nTo fetch information about all the running\\_processes on the macOS, you must provide sudo access to osquery. If this configuration is not made, then running\\_processes.rb will only fetch what is triggered by \\_servicenow user. For tcp\\_connections.rb, you must add ‘sudo lsof’ command in the sudoers file. If this is not done, tcp\\_connections.rb will only fetch what is triggered by \\_servicenow user.\n\n## Data collected\n\nACC-VC uses the same classification criteria as IP-based Discovery for classifying as computer or server. The subset of collected data includes the following categories:\n\n-   Basic inventory – Starting with ACC-F version 2.10.1, this will not be used.\n-   Data collection - Collects the necessary data for classification and identification of a host CI. This includes host name, serial numbers, and OS information.\n-   Installed Software – cmdb\\_sam\\_sw\\_install \\(if SAM enabled\\) and cmdb\\_software\\_instance \\(if SAM not enabled\\)\n-   File Systems – cmdb\\_ci\\_file\\_system\n-   Storage Devices – cmdb\\_ci\\_disk and cmdb\\_ci\\_storage\\_device\n-   Serial Numbers – cmdb\\_serial\\_number\n-   Network Adapters – cmdb\\_ci\\_network\\_adapter and cmdb\\_ci\\_ip\\_address\n-   TCP Connections – cmdb\\_tcp\n-   Running Processes – cmdb\\_running\\_process \\(ACC-VC also classifies the running processes and creates application CIs in cmdb\\_ci\\_appl, where possible\\)\n-   Local User – cmdb\\_os\\_user \\(Populates the local users for all the Operating Systems that ACC-VC supports by adding a new module called local\\_user​\\)\n-   Enhanced inventory – Collects enhanced data \\(such CPU info, start\\_date, object\\_id\\) which is not necessary for identifying a unique host.\n\n\\[Omitted image \"acc\\_v\\_relationships.png\"\\] Alt text: This diagram shows the layout and relationships\n\n## Agent Client Collector terms\n\n-   **Agent Client Collector \\(ACC\\)**\n\n    The software component installed on target hosts that communicates with the MID Server. Sometimes referred to as Agent. This component is a ServiceNow derivative of Sensu-Go.\n\n-   **Agent Client Collector Framework \\(ACC-F\\)**\n\n    A ServiceNow base scoped application that leverages ACC and provides core capabilities \\(including Check Types, Check Definitions, Policies, and so on\\) enabling other ACC scoped applications, including ACC-M and ACC-VC.\n\n-   **Agent Client Collector Monitoring Monitoring \\(ACC-M\\)**\n\n    A ServiceNow scoped application enabling monitoring use cases.\n\n-   **Agent Client Collector for Visibility Content \\(ACC-VC\\)**\n\n    A ServiceNow scoped application that implements push-based Discovery leveraging ACC and ACC-F.\n\n-   **Horizontal IP-based Discovery**\n\n    Traditional Discovery available to customers prior to ACC-VC. It discovers data via Probes and Patterns through the MID Server, requiring the Discovery Plugin.\n\n-   **Modules**\n\n    A subset of discovered data that is populated as part of Discovery. Examples of Modules include: Data Collection, Installed Processes, Serial Numbers, File Systems, Storage Devices, Network Adapters, Running Processes, and TCP Connections.\n\n-   **Push-based Discovery**\n\n    Discover data via ACC, ACC-F, ACC-VC, and the MID Server with a direct push of data from the target host. Discovery does not require specific IP range configuration on a Discovery Schedule or providing Discovery Credentials for target host.\n\n-   **Sensu-Go agent**\n\n    The Free and Open Source project which ACC is derived from.\n\n-   **Virtual Machine Instance**\n\n    A virtual target host running inside of a hypervisor, either on-premise or within a cloud service provider like AWS, GCP, or Microsoft Azure.\n\n-   **Virtual Machine Image**\n\n    A snapshot of a live virtual machine instance persisted to a file system or cloud storage.\n\n\n-   **[Agent Client Collector for Visibility Content default checks and policies](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/agent-client-collector/acc-visibility-checks-policies.md)**  \nAgent Client Collector for Visibility Content \\(ACC-VC\\) provides various checks and policies as well as a business rule.\n-   **[Agent Client Collector MID-less installation command parameters](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/agent-client-collector/acc-ics-command-params.md)**  \nDescription of the command line parameters used during MID-less Agent Client Collector installation.\n-   **[Data collected during Agent Client Collector for Visibility Content File-Based Discovery](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/agent-client-collector/data-collected-file-based-discovery.md)**  \nThe following tables describe the data collected during Agent Client Collector for Visibility Content file-based Discovery.\n-   **[Software edition configuration fields](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/agent-client-collector/software-edition-configuration.md)**  \nDescription of the software edition configuration fields in use when identifying the edition of Windows software.\n-   **[Agent Client Collector File-Based Discovery properties](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/agent-client-collector/file-based-discovery-configuration-properties.md)**  \nConfigure File-Based Discovery behavior using system properties that control scanning paths, performance throttling, and file filtering options.\n-   **[Web usage data collection tables and fields](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/agent-client-collector/web-usage-collection-tables.md)**  \nDescription of the tables and their fields used when gathering web usage data from your Windows and macOS machines.\n-   **[Archive file scanning filtering rules and limits](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/agent-client-collector/archive-file-scanning-reference.md)**  \nReference information for the filtering rules and performance safeguards that apply when Agent Client Collector for Visibility Content scans ZIP and JAR archive files during File-Based Discovery.\n-   **[Software filter tables](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/agent-client-collector/sw-filter-tables.md)**  \nThe following table lists the software filter tables and the purpose each one serves.\n-   **[Software filter fields](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/agent-client-collector/sw-filter-fields.md)**  \nThe following table lists the software filter fields from which you can create a filter.\n-   **[License key discovery and access control tables](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/agent-client-collector/license-key-discovery-reference.md)**  \nReference information for the tables, fields, access control, and scheduled job used by license key discovery in Agent Client Collector for Visibility Content.\n-   **[Running process-based discovery platform coverage and properties](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/agent-client-collector/running-process-based-discovery-platform-coverage-properties.md)**  \nPlatform coverage identifies which operating systems are supported and what privileges the agent needs for full coverage. The system property controls whether the feature is enabled or disabled.\n-   **[ACC-VC NPVDI system properties](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/agent-client-collector/accvc-npvdi-properties.md)**  \nSystem properties that control how Agent Client Collector for Visibility Content \\(ACC-VC\\) runs **Enhanced Discovery** and installed software checks on Windows non-persistent virtual desktop infrastructure \\(NPVDI\\) endpoints.\n\n**Parent Topic:**[Agent Client Collector reference](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/agent-client-collector/acc-reference.md)\n\n"}}