Inventory
The inventory lists asset facts for every node, collected through Salt. It is also where admins set a node's patch ring and lock it.
To open it: choose Machines > Inventory.
Collect the inventory
The inventory is collected when you ask for it. It is not refreshed by the regular scans.
- Choose Collect now.
- Wait. Gardience asks every node for its facts and saves the results when every node has answered, or after 3 minutes. The page reloads after 20 seconds; if the collection is still running, reload it again later.
The time of the last collection is shown next to the button. Any signed-in user can collect the inventory. Collecting is read-only and works on locked nodes.
Windows and Linux machines are in their own sections; search by any fact (name, release, domain, kernel, admins, ring, locked). Long lists in the console come a page at a time, in sections with their counts, with one search box across all of them, so the page stays quick at 10,000 machines. Rows per page (25 to 250) are remembered in your browser.
What each column shows
| Column | Windows | Linux |
|---|---|---|
| OS | Operating system name | Operating system name |
| Release | OS release | OS release |
| Domain | The domain, or "WORKGROUP (not domain-joined)" | Empty |
| BitLocker | Protection status and volume status of C:, or "not available" | Empty |
| .NET | .NET Framework 4.8.1, 4.8, another 4.x release, or "none" | Empty |
| SELinux | Empty | The getenforce result, or "not installed" |
| Kernel | Empty | Kernel release |
| CPUs | Number of CPUs | Number of CPUs |
| RAM MB | Memory in MB | Memory in MB |
| Disk free GB | Free space on C: | Free space on / |
| Local admins | Number of members of the local Administrators group | Number of users listed in the wheel and sudo groups |
| Last boot | Last boot time | Last boot time |
| Virtual | Virtualization type reported by Salt | Virtualization type reported by Salt |
| Salt | Salt agent version | Salt agent version |
| Patch ring | Pilot or Broad | Pilot or Broad |
| System lock | Locked, with reason and who locked it, or a Lock… button | Same |
A node that appears in the dashboard but has not answered an inventory collection is listed with empty columns.
Set a node's patch ring
Admins can move a node between the two built-in patch rings:
- Make pilot puts the node in Ring0-Pilot.
- Move to broad puts it back in Ring1-Broad.
The node must be online; if it does not answer within a minute, try again later. The change is recorded in the audit log. See Workflows and approvals for how rings are used.
Lock or unlock a node
Admins can lock a node so it refuses every change:
- Choose Lock… on the node.
- Enter the reason. It goes in the audit log.
To unlock it, choose Unlock. See Change windows and locks for what a lock does.