OS Facts Matrix
This guide lists detailed OS‑level facts (Linux/Windows) collected by Breeze Agent.
| Cloudaware OS Facts | Linux | Windows |
|---|---|---|
| ad_ou | + | + |
| aio_agent_build | + | + |
| aks_node_resource_group_id | + | - |
| architecture | + | + |
| az_metadata.compute.location | + | + |
| az_metadata.compute.name | + | + |
| az_metadata.compute.offer | + | + |
| az_metadata.compute.osType | + | + |
| az_metadata.compute.placementGroupId | + | + |
| az_metadata.compute.plan.name | + | + |
| az_metadata.compute.plan.product | + | + |
| az_metadata.compute.plan.publisher | + | + |
| az_metadata.compute.platformFaultDomain | + | + |
| az_metadata.compute.platformUpdateDomain | + | + |
| az_metadata.compute.publicKeys | + | + |
| az_metadata.compute.publisher | + | + |
| az_metadata.compute.resourceGroupName | + | + |
| az_metadata.compute.sku | + | + |
| az_metadata.compute.subscriptionId | + | + |
| az_metadata.compute.tags.${TAG} | + | + |
| az_metadata.compute.version | + | + |
| az_metadata.compute.vmId | + | + |
| az_metadata.compute.vmScaleSetName | + | + |
| az_metadata.compute.vmSize | + | + |
| az_metadata.compute.zone | + | + |
| az_metadata.network.interface | + | + |
| azure.id | + | + |
| azure.instanceid | + | + |
| azure.name | + | + |
| azure.subscriptionid | + | + |
| azure.tags | + | + |
| azure.vmid | + | + |
| azure.vmscalesetname | + | + |
| bios_release_date | + | - |
| bios_vendor | + | - |
| bios_version | + | - |
| blockdevice${DEVICE}model | + | - |
| blockdevice${DEVICE}vendor | + | - |
| blockdevice_${DEVICE}size | + | - |
| blockdevices | + | - |
| boardmanufacturer | + | - |
| boardproductname | + | - |
| boardserialnumber | + | - |
| breeze_agent_id | + | + |
| breeze_agent_uuid | + | + |
| breeze_installer_version | + | + |
| clamav_lastupdate | + | - |
| clamav_signature | + | - |
| clamav_version | + | - |
| clientcert | + | + |
| clientnoop | + | + |
| default_gateway | + | + |
| dhcp_servers.${INTERFACE} | + | - |
| disks_space.${DISK}.free_space_gb | - | + |
| disks_space.${DISK}.free_space_perc | - | + |
| disks_space.${DISK}.total_space_gb | - | + |
| disks_space.${DISK}.used_space_perc | - | + |
| dmi.product.serial_number | + | + |
| domain | + | + |
| dot_net.net4_version | - | + |
| ec2_account_id | + | + |
| ec2_autoscaling_target_lifecycle_state | + | + |
| ec2_events_maintenance_history | + | + |
| ec2_events_maintenance_scheduled | + | + |
| ec2_events_recommendations_rebalance | + | - |
| ec2_hibernation_configured | + | + |
| ec2_identity_credentials_ec2_info${NUMBER} | + | - |
| ec2_identity_credentials_ec2_info_${NUMBER} | - | + |
| ec2_kernel_id | + | - |
| ec2_managed_ssh_keys_signer_${CERT} | + | - |
| ec2_metadata.ami-id | + | + |
| ec2_metadata.ami-launch-index | + | + |
| ec2_metadata.ami-manifest-path | + | + |
| ec2_metadata.autoscaling.target-lifecycle-state | + | + |
| ec2_metadata.block-device-mapping.${DEVICE} | + | + |
| ec2_metadata.events.maintenance.history | + | + |
| ec2_metadata.events.maintenance.scheduled | + | + |
| ec2_metadata.events.recommendations.rebalance | + | - |
| ec2_metadata.hibernation.configured | + | + |
| ec2_metadata.hostname | + | + |
| ec2_metadata.iam.info | + | + |
| ec2_metadata.identity-credentials.ec2.info | + | + |
| ec2_metadata.instance-action | + | + |
| ec2_metadata.instance-id | + | + |
| ec2_metadata.instance-life-cycle | + | + |
| ec2_metadata.instance-type | + | + |
| ec2_metadata.kernel-id | + | - |
| ec2_metadata.local-hostname | + | + |
| ec2_metadata.local-ipv4 | + | + |
| ec2_metadata.mac | + | + |
| ec2_metadata.managed-ssh-keys.${CERT} | + | - |
| ec2_metadata.metrics.vhostmd | + | + |
| ec2_metadata.network.interfaces.macs.${MAC}.device-number | + | + |
| ec2_metadata.network.interfaces.macs.${MAC}.interface-id | + | + |
| ec2_metadata.network.interfaces.macs.${MAC}.ipv4-associations.18.158.97.93 | - | + |
| ec2_metadata.network.interfaces.macs.${MAC}.local-hostname | + | + |
| ec2_metadata.network.interfaces.macs.${MAC}.local-ipv4s | + | + |
| ec2_metadata.network.interfaces.macs.${MAC}.mac | + | + |
| ec2_metadata.network.interfaces.macs.${MAC}.owner-id | + | + |
| ec2_metadata.network.interfaces.macs.${MAC}.public-hostname | - | + |
| ec2_metadata.network.interfaces.macs.${MAC}.public-ipv4s | - | + |
| ec2_metadata.network.interfaces.macs.${MAC}.security-group-ids | + | + |
| ec2_metadata.network.interfaces.macs.${MAC}.security-groups | + | + |
| ec2_metadata.network.interfaces.macs.${MAC}.subnet-id | + | + |
| ec2_metadata.network.interfaces.macs.${MAC}.subnet-ipv4-cidr-block | + | + |
| ec2_metadata.network.interfaces.macs.${MAC}.vpc-id | + | + |
| ec2_metadata.network.interfaces.macs.${MAC}.vpc-ipv4-cidr-block | + | + |
| ec2_metadata.network.interfaces.macs.${MAC}.vpc-ipv4-cidr-blocks | + | + |
| ec2_metadata.placement.availability-zone | + | + |
| ec2_metadata.placement.availability-zone-id | + | + |
| ec2_metadata.placement.group-name | + | - |
| ec2_metadata.placement.region | + | + |
| ec2_metadata.product-codes | + | + |
| ec2_metadata.profile | + | + |
| ec2_metadata.public-hostname | + | + |
| ec2_metadata.public-ipv4 | + | + |
| ec2_metadata.public-keys.0.openssh-key | + | + |
| ec2_metadata.reservation-id | + | + |
| ec2_metadata.security-groups | + | + |
| ec2_metadata.services.domain | + | + |
| ec2_metadata.services.partition | + | + |
| ec2_metadata.source | + | - |
| ec2_metadata.tags.instance.${TAG} | + | - |
| ec2_product_codes | + | + |
| ec2_tags_instance_${TAG} | + | - |
| ec2_userdata | + | + |
| eks_cluster_name | + | - |
| fact_source | + | + |
| facterversion | + | + |
| files.${FILE}.${KEY} | + | + |
| filesystems | + | - |
| fqdn | + | + |
| gce.instance.cpuPlatform | + | - |
| gce.instance.description | + | - |
| gce.instance.disks | + | - |
| gce.instance.hostname | + | - |
| gce.instance.id | + | + |
| gce.instance.image | + | - |
| gce.instance.legacyEndpointAccess.${VERSION} | + | - |
| gce.instance.licenses | + | - |
| gce.instance.machineType | + | - |
| gce.instance.maintenanceEvent | + | - |
| gce.instance.name | + | + |
| gce.instance.networkInterfaces | + | - |
| gce.instance.preempted | + | - |
| gce.instance.remainingCpuTime | + | - |
| gce.instance.scheduling.automaticRestart | + | - |
| gce.instance.scheduling.onHostMaintenance | + | - |
| gce.instance.scheduling.preemptible | + | - |
| gce.instance.serviceAccounts.${ACCOUNT}.aliases | + | - |
| gce.instance.serviceAccounts.${ACCOUNT}.email | + | - |
| gce.instance.serviceAccounts.${ACCOUNT}.scopes | + | - |
| gce.instance.tags | + | - |
| gce.instance.virtualClock.driftToken | + | - |
| gce.instance.zone | + | + |
| gce.project.attributes.${ATTRIBUTE} | + | - |
| gce.project.numericProjectId | + | - |
| gce.project.projectId | + | + |
| gid | + | - |
| hardwareisa | + | + |
| hardwaremodel | + | + |
| id | + | + |
| iis_version | - | + |
| interfaces | + | + |
| ipaddress6 | + | + |
| ipaddress6_${INTERFACE} | + | + |
| ipaddress_${INTERFACE} | + | + |
| is_virtual | + | + |
| java.java.runtime.version | + | - |
| java.java.vendor | + | - |
| java.java.version | + | - |
| java.java.vm.vendor | + | - |
| java.java.vm.version | + | - |
| java.processes | + | - |
| java.running | + | - |
| k8s_node_name | + | - |
| k8s_service_host | + | - |
| k8s_service_port | + | - |
| k8s_tunhub_client | + | - |
| kernel | + | + |
| kernelmajversion | + | + |
| kernelrelease | + | + |
| kernelversion | + | + |
| load_average_1 | + | - |
| load_average_15 | + | - |
| load_average_5 | + | - |
| local_admins | + | + |
| local_users | + | - |
| lsbdistcodename | + | - |
| lsbdistdescription | + | - |
| lsbdistid | + | - |
| lsbdistrelease | + | - |
| lsbmajdistrelease | + | - |
| lsbminordistrelease | + | - |
| lsbrelease | + | - |
| macaddress_${INTERFACE} | + | + |
| manufacturer | + | + |
| memory.swap.available | + | - |
| memory.swap.available_bytes | + | - |
| memory.swap.capacity | + | - |
| memory.swap.total | + | - |
| memory.swap.total_bytes | + | - |
| memory.swap.used | + | - |
| memory.swap.used_bytes | + | - |
| memory.system.available | + | + |
| memory.system.available_bytes | + | + |
| memory.system.capacity | + | + |
| memory.system.total | + | + |
| memory.system.total_bytes | + | + |
| memory.system.used | + | + |
| memory.system.used_bytes | + | + |
| memoryfree | + | + |
| memoryfree_mb | + | + |
| memorysize | + | + |
| memorysize_mb | + | + |
| microsoft_defender_atp_id | + | + |
| microsoft_defender_org_id | + | + |
| microsoft_oms_agent_id | + | - |
| mountpoints.${MOUNTPOINT}.available | + | - |
| mountpoints.${MOUNTPOINT}.available_bytes | + | - |
| mountpoints.${MOUNTPOINT}.capacity | + | - |
| mountpoints.${MOUNTPOINT}.device | + | - |
| mountpoints.${MOUNTPOINT}.filesystem | + | - |
| mountpoints.${MOUNTPOINT}.options | + | - |
| mountpoints.${MOUNTPOINT}.size | + | - |
| mountpoints.${MOUNTPOINT}.size_bytes | + | - |
| mountpoints.${MOUNTPOINT}.used | + | - |
| mountpoints.${MOUNTPOINT}.used_bytes | + | - |
| mtu_${INTERFACE} | + | + |
| netmask_${INTERFACE} | + | + |
| network_${INTERFACE} | + | + |
| networking.mac | + | + |
| node_report_timestamp | + | + |
| operatingsystemmajrelease | + | + |
| os.family | + | + |
| os.lsb.distcodename | + | - |
| os.lsb.distdescription | + | - |
| os.lsb.distid | + | - |
| os.lsb.distrelease | + | - |
| os.lsb.majdistrelease | + | - |
| os.lsb.minordistrelease | + | - |
| os.lsb.release | + | - |
| os.name | + | + |
| os.release.full | + | + |
| os.release.major | + | + |
| os.release.minor | + | + |
| osfamily | + | + |
| package_updates_result | - | + |
| partitions.${PARTITION}.filesystem | + | - |
| partitions.${PARTITION}.label | + | - |
| partitions.${PARTITION}.mount | + | - |
| partitions.${PARTITION}.uuid | + | - |
| partitions.${PARTITION}28.label | + | - |
| path | + | + |
| physicalprocessorcount | + | + |
| powershell.compatible | - | + |
| powershell.installed | + | + |
| powershell.version | - | + |
| processor${NUMBER} | + | + |
| processorcount | + | + |
| productname | + | + |
| proxy.http | + | + |
| proxy.https | + | + |
| ps | + | + |
| puppetversion | + | + |
| receive_time | + | + |
| rhel_subscription.arch | + | - |
| rhel_subscription.ends | + | - |
| rhel_subscription.overall_status | + | - |
| rhel_subscription.product_id | + | - |
| rhel_subscription.product_name | + | - |
| rhel_subscription.starts | + | - |
| rhel_subscription.status | + | - |
| rhel_subscription.system_purpose_status | + | - |
| rhel_subscription.the_yum/dnf_plugins | + | - |
| rhel_subscription.version | + | - |
| rubyplatform | + | + |
| rubysitedir | + | + |
| rubyversion | + | + |
| scan_log4j.count | + | + |
| scan_log4j.findings | + | + |
| scan_log4j.id | + | + |
| scan_log4j.result | + | + |
| scan_log4j.shaded_count | + | + |
| selinux | + | - |
| selinux_config_mode | + | - |
| selinux_config_policy | + | - |
| selinux_current_mode | + | - |
| selinux_enforced | + | - |
| selinux_policyversion | + | - |
| serialnumber | + | + |
| splunk_agent_running | + | + |
| splunk_agent_version | + | + |
| sqlserver_features.${VERSION} | - | + |
| sqlserver_instances.${VERSION}.${INSTANCE}.features | - | + |
| sqlserver_instances.${VERSION}.${INSTANCE}.name | - | + |
| sqlserver_instances.${VERSION}.${INSTANCE}.patch_level | - | + |
| sqlserver_instances.${VERSION}.${INSTANCE}.reg_root | - | + |
| sqlserver_instances.${VERSION}.${INSTANCE}.version | - | + |
| sqlserver_instances.${VERSION}.${INSTANCE}.version_friendly | - | + |
| sshd_passwordauthentication | + | - |
| sshd_permitemptypasswords | + | - |
| sshd_permitrootlogin | + | - |
| sshd_permituserenvironment | + | - |
| sshdsakey | + | - |
| sshecdsakey | + | - |
| sshed25519key | + | - |
| sshfp_dsa | + | - |
| sshfp_ecdsa | + | - |
| sshfp_ed25519 | + | - |
| sshfp_rsa | + | - |
| sshrsakey | + | - |
| subversion | + | - |
| swapfree | + | - |
| swapfree_mb | + | - |
| swapsize | + | - |
| swapsize_mb | + | - |
| system32 | - | + |
| system_uptime.days | + | + |
| system_uptime.hours | + | + |
| system_uptime.seconds | + | + |
| system_uptime.uptime | + | + |
| tags.instance.azure.id | - | + |
| tags.vmware.service.uuid | + | + |
| tags.vmware.vmid | + | + |
| time_offset.last_check | + | + |
| time_offset.offset | + | + |
| timezone | + | + |
| trendmicro_software | + | + |
| trusted.hostname | + | + |
| type | + | - |
| uniqueid | + | - |
| uptime | + | + |
| uptime_days | + | + |
| uptime_hours | + | + |
| uptime_seconds | + | + |
| uuid | + | - |
| vlans | + | - |
| vulnerability_meltdown_patch_enabled | + | + |
| wazuh_agent_status | + | + |
| windows_full_version | - | + |
| yara_last_scan_date | + | - |
| yara_scan_result | + | - |
note
macOS fact collection is planned, but no ETA is currently available.
For new deployments, use this matrix together with the Telemetry Schema and module‑specific field documentation.