rbock@google.com zmin@chromium.org rbock@google.com zmin@chromium.org rbock@google.com zmin@chromium.org rbock@google.com zmin@chromium.org rbock@google.com zmin@chromium.org rbock@google.com zmin@chromium.org rbock@google.com zmin@chromium.org rbock@google.com zmin@chromium.org rbock@google.com zmin@chromium.org rbock@google.com zmin@chromium.org rbock@google.com zmin@chromium.org rbock@google.com zmin@chromium.org rbock@google.com zmin@chromium.org rbock@google.com zmin@chromium.org hmare@google.com cbe-eng@google.com rbock@google.com zmin@chromium.org rbock@google.com zmin@chromium.org xzonghan@google.com zmin@chromium.org rbock@google.com zmin@chromium.org rbock@google.com zmin@chromium.org rbock@google.com zmin@chromium.org rbock@google.com zmin@chromium.org rbock@google.com zmin@chromium.org rbock@google.com zmin@chromium.org rbock@google.com zmin@chromium.org rbock@google.com zmin@chromium.org rbock@google.com zmin@chromium.org rbock@google.com zmin@chromium.org rbock@google.com zmin@chromium.org asumaneev@google.com chromeos-commercial-remote-management@google.com rbock@google.com zmin@chromium.org rbock@google.com zmin@chromium.org rbock@google.com zmin@chromium.org ydago@chromium.org cbe-eng@google.com dkuzmin@google.com cros-oobe@google.com Recorded when user enters their account on license packged device during enrollment process. ssolarewicz@google.com cec-growth@google.com Records the duration of the Entra SSO authentication event on Android which finished {Result}. Time is measured from the moment the navigation is defered. This metric is emitted by enterprise_auth::EntraProviderAndroid just before the navigation is resumed. ssolarewicz@google.com cec-growth@google.com Records the reason of a failed authentication event for Entra SSO on Android. This metric is emitted by enterprise_auth::EntraProviderAndroid just before the navigation is resumed. ssolarewicz@google.com cec-growth@google.com If a header provided by the Android OS for the purpose of the Entra SSO authentication event is skipped, reason is emitted via this histogram. This metric is emitted by enterprise_auth::EntraProviderAndroid during parsing of the authentication headers. ssolarewicz@google.com cec-growth@google.com Records the outcome of the Entra SSO authentication event on Android. This metric is emitted by enterprise_auth::EntraProviderAndroid just before the navigation is resumed. igorcov@chromium.org vsavu@google.com Consistency between TPM lock state and absence/presence of install attributes at boot. vsavu@google.com igorcov@chromium.org chromeos-commercial-remote-management@google.com Count the number of timeouts and successes for AutoEnrollmentController. sergiyb@google.com chromeos-commercial-remote-management@google.com Duration of the private set membership request to determine enrollment state of the device. Only recorded if it finished successfully. The histogram was expired (not recording data) from 2022-04-10 until 2022-07-15. sergiyb@chromium.org igorcov@chromium.org chromeos-commercial-remote-management@google.com Device management server request status for auto-enrollment PSM requests. {EnterpriseAutoEnrollmentType} The histogram was expired (not recording data) from 2021-10-31 until 2021-11-09. sergiyb@chromium.org igorcov@chromium.org chromeos-commercial-remote-management@google.com Network error code (if applicable) for auto-enrollment PSM requests. {EnterpriseAutoEnrollmentType} The histogram was expired (not recording data) from 2021-10-31 until 2021-11-09. sergiyb@chromium.org igorcov@chromium.org chromeos-commercial-remote-management@google.com All possible PSM protocol results after it has executed successfully or terminated due to an error or timeout. This request is used to determine the initial enrollment state of the device. {EnterpriseAutoEnrollmentType} The histogram was expired (not recording data) from 2021-10-31 until 2021-11-09. caott@google.com cros-edu-eng@google.com Reports success/failure when a spotlight session in Boca app is attempted. qiutanw@google.com chrome-enterprise-security@google.com Records the time elapsed from the browser process creation (launch time) to the successful upload of the browser launch event. Only recorded for successful uploads. Emitted by BrowserLaunchEventController when the upload callback returns success. qiutanw@google.com chrome-enterprise-security@google.com Records the number of retries performed before a successful browser launch event upload. Emitted by BrowserLaunchEventController when the upload callback returns success. qiutanw@google.com chrome-enterprise-security@google.com Records the number of command-line switches reported in the browser launch event. Emitted by BrowserLaunchEventController when the event is collected at startup, regardless of upload success. qiutanw@google.com chrome-enterprise-security@google.com Records the final outcome of the browser launch event upload process. Emitted by BrowserLaunchEventController when it either succeeds or gives up (due to permanent error or retry limit). gujen@google.com goanuj@google.com Recorded when a signed-in user is automatically signed out of the browser due to the BrowserSignin policy being set to 0 (sign-in disabled) by their organization. The sample is always recorded as true. Warning: This histogram was expired from 2021-06-30 to 2022-11-30; data may be missing. gujen@google.com goanuj@google.com Recorded when a user is in the process of signing in to the browser, but is interrupted due to the BrowserSignin policy being set to 0 (sign-in disabled) by their organization. The sample is always recorded as true. Warning: This histogram was expired from 2021-06-30 to 2022-11-30; data may be missing. haihan@google.com valadkevich@google.com cbe-cep-eng@google.com Records whether the CacheEncryptionEnabled enterprise policy is enabled, or if the EnableCacheEncryptionForTesting flag is set. Logged during network context initialization when evaluating whether the HTTP cache should be encrypted. Useful for slicing Finch experiment data. zmin@chromium.org cbe-eng@google.com Events for counting CBCM policy invalidations received with and without payloads. Invalidations indicate that a policy has been updated and should be refreshed. Payloads provide context about the policy update, but may be absent if dropped by the invalidation service. zmin@chromium.org cbe-eng@google.com Events measuring effectiveness of refreshing CBCM policy when invalidations are received from a service. For each refresh, indicates whether the policy changed, and whether the policy was invalidated at the time of the refresh. zmin@chromium.org src/chrome/browser/enterprise/reporting/OWNERS Recorded when real time report enter the queue. It indicates whether the report is pushed to the queue successfully or not. nicolaso@chromium.org zmin@chromium.org cbe-eng@google.com Events for counting status of executed CBCM remote commands. The metric includes only signed CBCM remote commands. Reports a final status of finished remote command (e.g. success, failure or termination). nicolaso@chromium.org zmin@chromium.org cbe-eng@google.com Events for counting received CBCM remote commands. The metric includes signed CBCM remote commands, both valid and invalid. Valid remote command is counted by its type. Invalid remote command is counted by a reason why it is considered invalid (e.g. unknown type or duplication). nicolaso@chromium.org zmin@chromium.org cbe-eng@google.com Events for counting CBCM remote commands invalidations received with and without payloads. Invalidations indicate that there is a remote command to execute. Payloads provide context about the remote commands update, but may be absent if dropped by the invalidation service. seblalancette@chromium.org cbe-device-trust-eng@google.com Captures the initialization status returned after initializing {Retry} a LevelDB database instance used by the managed client certificates store. seblalancette@chromium.org cbe-device-trust-eng@google.com Captures the Kcer error returned when importing a managed client certificate into the ChromeOS (Kcer) user token fails. Recorded on ChromeOS each time a certificate commit fails during client certificate provisioning. seblalancette@chromium.org cbe-device-trust-eng@google.com Captures the Kcer error returned when reading back the KeyInfo of a freshly generated ChromeOS client certificate key fails. The key itself was still generated successfully; only its hardware-backing state could not be confirmed, so it is reported as software-backed. See also Enterprise.ClientCertificate.Ash.KeyTaggingError, which is recorded immediately before this KeyInfo lookup in the same post-generation sequence. Managed-identity keys are generated at most once per profile: only when the profile has no usable persisted key, which in practice means once, the first time the policy provisions an identity. Certificate renewal reuses the existing key, so this is not recorded on a TLS handshake, navigation, or browser boot. seblalancette@chromium.org cbe-device-trust-eng@google.com Captures the Kcer error returned when hardware-backed (TPM) key generation fails and the ChromeOS client certificate provisioning flow falls back to a software key. Key generation is recorded at most once per profile: only when the profile has no usable persisted key, which in practice means once, the first time the policy provisions an identity. Certificate renewal reuses the existing key, so this is not recorded on a TLS handshake, navigation, or browser boot. seblalancette@chromium.org cbe-device-trust-eng@google.com Captures the Kcer error returned when removing a managed client certificate key (and its certificates) from the ChromeOS (Kcer) user token fails. Covers both the SPKI-targeted deletion and the browser enterprise client certificate key sweep. Recorded on ChromeOS each time a removal fails. seblalancette@chromium.org cbe-device-trust-eng@google.com Captures the Kcer error returned when tagging a freshly generated key as a browser enterprise client certificate key fails. Tagging is best-effort and does not abort provisioning, so this tracks how often the ownership metadata used for later cleanup/auditing ends up missing. Recorded at most once per profile (in practice, once, the first time the policy provisions an identity). seblalancette@chromium.org cbe-device-trust-eng@google.com Captures the Kcer error returned when software-backed key generation fails after the hardware-backed generation attempt already failed. See also Enterprise.ClientCertificate.Ash.HardwareKeyGenerationError, which is always recorded first in this fallback path. Same cadence as that metric: recorded at most once per profile, only when the profile has no usable persisted key (in practice, once, the first time the policy provisions an identity); not recorded on certificate renewal, which reuses the existing key. seblalancette@chromium.org cbe-device-trust-eng@google.com Captures whether the HTTP response body for the {Level} certificate creation request had a certificate or not. seblalancette@chromium.org cbe-device-trust-eng@google.com Captures the source of a private key creation after it was created (e.g. TPM-backed or not) as part of the client certificate provisioning flow for a {Level}. antoli@google.com cbe-device-trust-eng@google.com Captures a terminal error that occurred when trying to instantiate a SecIdentityRef for a {Level} level client certificate on iOS. seblalancette@chromium.org cbe-device-trust-eng@google.com Captures whether the best-effort cleanup of managed key material, performed when the client certificate provisioning policy is disabled, succeeded for a {Level}. Recorded on ChromeOS each time the policy is observed disabled. seblalancette@chromium.org cbe-device-trust-eng@google.com Captures a terminal error that occured when trying to provision a client certificate for a {Level}. seblalancette@chromium.org cbe-device-trust-eng@google.com Captures a terminal store error that occured when trying to provision a client certificate for a {Level}. seblalancette@chromium.org cbe-device-trust-eng@google.com Captures whether the {ProvisioningScenario} provisioning scenario was successful or not for {Level} level client certificates. seblalancette@chromium.org cbe-device-trust-eng@google.com Captures how long a {ProvisioningOutcome} {ProvisioningScenario} provisioning scenario took for {Level} level client certificates. seblalancette@chromium.org cbe-device-trust-eng@google.com Captures a client error that occured when trying to upload a {Level}'s public key for {UploadScenario}. seblalancette@chromium.org cbe-device-trust-eng@google.com Captures the HTTP response code for the upload of a {Level}'s public key for {UploadScenario}. eliashomsi@google.com cbe-device-trust-eng@google.com Captures the security level of a private key created for client certificate provisioning on Android. This indicates if the key is software-backed, hardware-backed in a TEE, or secured by a StrongBox. zmin@chromium.org src/chrome/browser/enterprise/reporting/OWNERS Recorded when cloud extension request pending list is updated. Note that when multiple requests are added or removed together, there will be only one event recorded. ftirelo@chromium.org zmin@chromium.org The amount of time for fetching cloud policies, measured from the moment the request object is created until the client receives the policy payload. zmin@chromium.org igorruvinov@chromium.org Records the enrollment token location when the token is loaded. morez@google.com cbe-eng@google.com Recorded whenever policies are updated and mapped to browser preferences. Logs whether there were any errors mapping policy settings to standard browser preferences (e.g., invalid types, schema violations, deprecated values). morez@google.com cbe-eng@google.com Recorded when the policy or signing key cache file is written to disk in the profile directory. Logs directory creation failure, file write failure, or success. morez@google.com cbe-eng@google.com Recorded when a user is managed but profile cannot be managed. This generally indicates a bug in sign-in which has caused a bad state, where policies should be applied but are not. Android only. morez@google.com cbe-eng@google.com Recorded when a {ReportType} report is dropped because its size exceeds the maximum report size limit allowed for upload. Logs the size of the dropped payload in KB. morez@google.com cbe-eng@google.com The total processing wall-clock duration from the moment a {ReportType} report is triggered with security signals mode {SecuritySignalsMode} until it successfully finishes uploading or returns a final network error. morez@google.com cbe-eng@google.com Fires a boolean metric on background startup periodic timer events. Logs true if the timer fired but a previous report generation task is still active, indicating that report generation/upload has overrun the cycle (e.g., due to retries or slow generation). zmin@chromium.org pastarmovj@chromium.org The proto size of the basic Chrome browser cloud management reporting request. When a report is separated into multiple requests, all of them contain the basic request. zmin@chromium.org cec-eng@google.com Records the policy status of the profile being reported in an enterprise profile report. Recorded when a profile report is going to be uploaded with security signals mode {SecuritySignalsMode}. zmin@chromium.org cec-eng@google.com Records the number of profiles being reported in an enterprise profile report. Recorded when a profile report is going to be uploaded with security signals mode {SecuritySignalsMode}. hmare@google.com cbe-eng@google.com The error status of an enterprise cloud report generation attempt. zmin@chromium.org pastarmovj@chromium.org The number of request for one Chrome browser cloud management report. A report is separated into multiple requests when it's too large. zmin@chromium.org pastarmovj@chromium.org The proto size of each Chrome browser cloud management {ReportType} reporting request. It includes the requests which are more than 5MB and discarded. zmin@chromium.org pastarmovj@chromium.org The upload result for each cloud reporting request. Note that there may be multiple requests per report. Also, one request may creates multiple data point due to retry. grt@chromium.org src/chrome/browser/enterprise/reporting/OWNERS The trigger detected by the ReportScheduler responsible that led to an attempt to upload an enterprise report. przybytniowska@google.com austinzzr@chromium.org It will be recorded when promotion banner is displayed or clicked on Chrome Web Store. rslan@google.com cep-se@google.com Records the time taken to evaluate the Data Controls policy verdict for a drag and drop operation. This is synchronous on the UI thread. Recorded when the policy evaluation finishes, immediately before the verdict is returned. rslan@google.com cep-se@google.com Records the verdict of the Data Controls policy check for a drag and drop operation. This is recorded when the kDataControlsDragEnforcement feature is enabled and the policy evaluation completes. haihan@google.com cbe-cep-eng@google.com Records the time taken to evaluate the Data Controls policy verdict for a Glic paste operation. This is synchronous on the UI thread. Recorded when the policy evaluation finishes, immediately before the verdict is returned. haihan@google.com cbe-cep-eng@google.com Records the verdict of the Data Controls policy check for a Glic paste operation. Recorded when the policy evaluation completes. richardbadir@google.com cbe-cep-eng@google.com Records the time taken to evaluate Data Controls policy conditions for a clipboard paste operation. Recorded synchronously on the UI thread when GetPasteVerdict() finishes, immediately before returning the verdict. richardbadir@google.com cbe-cep-eng@google.com Records the time taken to evaluate Data Controls policy conditions for a screenshot check. Recorded synchronously on the UI thread when BlockScreenshots() finishes, immediately before returning the verdict. anaercegovac@google.com cep-se@google.com Records the verdict of the Data Controls policy check for a user clicking the "Search [Default Search Engine] with [selected text]" button. Increases in 'WARN' counts within this histogram indicate potential data exfiltration being actioned by the policy. The 'BLOCK' bucket is expected to be empty since the 'Search' item is hidden for block verdicts. eliashomsi@google.com cbe-data-protection-eng@google.com Records the size (in bytes) of data that might have been scanned by the Copy Enterprise Connector. It is logged once per user action. alshawwa@chromium.org cbe-cep-eng@google.com Records where the realtime url lookup verdict is read from in the data protection navigation observer. It is logged once per navigation. alshawwa@chromium.org cbe-cep-eng@google.com Records where the realtime url lookup verdict was read from a scan request or the local cache. igorcov@chromium.org chromeos-commercial-remote-management@google.com Logs the number of device local accounts on the device. asumaneev@google.com chromeos-commercial-remote-management@google.com Events for counting device local account policy invalidations received with and without payloads. Invalidations indicate that a policy has been updated and should be refreshed. Payloads provide context about the policy update, but may be absent if dropped by the invalidation service. As opposed to current histogram, Enterprise.DevicePolicyInvalidations2 counts only events of device policy invalidations. asumaneev@google.com chromeos-commercial-remote-management@google.com Events measuring effectiveness of refreshing device local account policy when invalidations are received from a service. For each refresh, indicates whether the policy changed, and whether the policy was invalidated at the time of the refresh. As opposed to current histogram, Enterprise.DevicePolicyRefresh3 counts only events of refreshing device policies. igorcov@chromium.org emaxx@chromium.org On ChromeOS, the result of the device ID validation in the device policy blob compared to the device ID from install attributes. Emitted every time the device policy was loaded or stored successfully after additional check for the presence of DM Token is done. This allows to filter out the cases of enrollment recovery. asumaneev@google.com chromeos-commercial-remote-management@google.com Events for counting device policy invalidations received with and without payloads. Invalidations indicate that a policy has been updated and should be refreshed. Payloads provide context about the policy update, but may be absent if dropped by the invalidation service. As opposed to current histogram, Enterprise.DeviceLocalAccountPolicyInvalidations2 counts only events of device local account policy invalidations. asumaneev@google.com chromeos-commercial-remote-management@google.com Events measuring effectiveness of refreshing device policy when invalidations are received from a service. For each refresh, indicates whether the policy changed, and whether the policy was invalidated at the time of the refresh. As opposed to current histogram, Enterprise.DeviceLocalAccountPolicyRefresh3 counts only events of refreshing device local account policies. macinashutosh@google.com chromeos-commercial-crd@google.com Reports success/failure when a session is attempted. macinashutosh@google.com chromeos-commercial-crd@google.com Reports success/failure when a session is attempted for the {Enterprise_CrdSessionType} and {Enterprise_UserSessionType} asumaneev@google.com chromeos-commercial-remote-management@google.com Events for counting status of executed device remote commands. The metric includes only signed device remote commands. Reports a final status of finished remote command (e.g. success, failure or termination). {Enterprise_RemoteCommandType} iremuguz@google.com chromeos-commercial-supportability@google.com Reports the failure reason of the FETCH_SUPPORT_PACKET remote command. It will be recorded by DeviceCommandFetchSupportPacketJob class when the command execution has completed with failure. It will indicate in which stage of execution had the failure (e.g. wrong command payload, error when exporting the generated support packet or enqueueing the LogUploadEvent to ReportQueue). asumaneev@google.com chromeos-commercial-remote-management@google.com Events for counting received device remote commands. The metric includes signed device remote commands, both valid and invalid. Valid remote command is counted by its type. Invalid remote command is counted by a reason why it is considered invalid (e.g. unknown type or duplication). asumaneev@google.com chromeos-commercial-remote-management@google.com Events for counting device remote commands invalidations received with and without payloads. Invalidations indicate that there is a remote command to execute. Payloads provide context about the remote commands update, but may be absent if dropped by the invalidation service. Metric is similar to Enterprise.DevicePolicyInvalidations2. Device local account scope does not exist for remote commands so there is no metric for remote commands similar to Enterprise.DeviceLocalAccountPolicyInvalidations2. rbock@google.com chromeos-commercial-remote-management@google.com managed-devices@google.com Recorded every time policy file is missing or corrupted on Chrome OS. Should be compared to Enterprise.DeviceSettings.UpdatedStatus as happens only if status is STORE_NO_POLICY and device being not managed. Warning: this histogram was expired from 2024-12-01 to 2025-03-11. Data may be missing. rbock@google.com chromeos-commercial-remote-management@google.com managed-devices@google.com Recorded every time as DeviceSettingsProvider updates its current state. Compared to Enterprise.DeviceSettings.UpdatedStatus contains the information about missing key on managed devices. Used to compare rate of Enterprise.DeviceSettings.MissingPolicyMitigated event. hmare@chromium.org cbe-eng@google.com Captures specific errors encountered when collecting certificates during the device signals collection flow. Recorded for each matched certificate that fails at a specific step. Successful collection events are not recorded in this histogram. seblalancette@chromium.org cbe-device-trust-eng@google.com Captures an error that occurred while trying to get signals from the CrowdStrike agent. seblalancette@chromium.org cbe-device-trust-eng@google.com Captures whether the CrowdStrike identifiers were captured from the data file or not. seblalancette@chromium.org cbe-device-trust-eng@google.com Captures the actual error whenever a {Signal} signal collection request failed with a {ErrorType} error. seblalancette@chromium.org cbe-device-trust-eng@google.com Captures the number of items as part of the {Signal} signal collection response. Recorded when the collection request was received. This histogram applies only to parameterized signals. seblalancette@chromium.org cbe-device-trust-eng@google.com Captures the number of signals requested to be collected in one request. seblalancette@chromium.org cbe-device-trust-eng@google.com Captures the number of items collected in a {Signal} signal collection response. Recorded only when the collection request was successful and the signal value represents a collection. seblalancette@chromium.org cbe-device-trust-eng@google.com Captures the signal collection latency for the {Signal} signal. Recorded only when the collection {Outcome}. seblalancette@chromium.org cbe-device-trust-eng@google.com Captures the number of delta between requested and returned items as part of the {Signal} signal collection response. Recorded when the collection request was completed. This histogram applies only to parameterized signals. seblalancette@chromium.org cbe-device-trust-eng@google.com Recorded whenever a device signal collection request {Variant} for a particular signal. xzonghan@chromium.org cbe-device-trust-eng@google.com Recorded the number of potentialy harmful apps when SafetyNet correctly collect this information. xzonghan@chromium.org cbe-device-trust-eng@google.com Recorded the success status of SafetyNet API when collecting potentially harmful apps. mwalachowski@google.com cbe-device-trust-eng@google.com Records the latency of the local IPC call to the Google Play Services SafetyNet Verify Apps API. Recorded each time Chrome Signal Sharing requests the verifiedApps and potentiallyHarmfulApps signals on Android. The measurement starts when the JNI call is initiated and ends when the callback is executed in C++. hmare@google.com cbe-device-trust-eng@google.com Captures the number of pending request that were remaining during a system signals service disconnect. hmare@google.com cbe-device-trust-eng@google.com Captures when the system signals service is running in another process. seblalancette@chromium.org cbe-device-trust-eng@google.com Recorded whenever a permission evaluation has been assessed for a particular user for whom device signals were requested. hmare@google.com seblalancette@chromium.org Various steps recorded when a device goes through the device trust connector attestation flow with a partner website. hmare@google.com seblalancette@chromium.org Latency of a {Variant} attestation step in the overarching Device Trust connector's attestation flow. This measures the amount of time required to generate and return a response to the given challenge, which is effectively the last step in the overall attestation flow. hmare@google.com seblalancette@chromium.org Result of the attestation step in the overarching Device Trust connector's attestation flow. Logged whenever the attestation step finishes, success or failure, and right before the throttled request resumes. lmasopust@google.com cbe-device-trust-eng@google.com Recorded when a device starts the device trust attestation flow with a partner website. This captures the enrollment status of the device where the attestation flow is happening. seblalancette@chromium.org cbe-device-trust-eng@google.com Recorded when a Device Trust handshake was completed between the browser and a server. This captures either the success or specific failure of the overall flow. hmare@google.com cbe-device-trust-eng@google.com Policy levels enabled for the Device Trust connector during the DTC inline flow process. The inline flow can occur during a user navigation, and the policy level determines the content of the attestation services' challenge response. seblalancette@google.com cbe-device-trust-eng@google.com Recorded when a key loading attempt was made with an enum value representing either a successful attempt, or different possible errors. seblalancette@chromium.org cbe-device-trust-eng@google.com Recorded every time a Device Trust {Variant} key is successfully used to sign a payload. Measures the signing latency in milliseconds. hmare@google.com seblalancette@chromium.org Recorded every time a Device Trust signing key is successfully loaded from persistence. This captures what trust level this key has, which in turn gives insights into how it was created (e.g. via a TPM or not). hmare@google.com seblalancette@chromium.org Recorded every time a Device Trust signing key is successfully loaded from persistence. This captures what algorithm this key was generated with. hmare@google.com seblalancette@chromium.org Recorded every time the browser attempted to {Variant} a Device Trust signing key. This captures the result from this process. seblalancette@chromium.org cbe-device-trust-eng@google.com Recorded when the browser received a failed response when triggering a Device Trust key rotation command. The browser will then attempt to categorize the failure using the given enum. seblalancette@chromium.org cbe-device-trust-eng@google.com Recorded when the browser failed to trigger a Device Trust key rotation command through the updater for an unknown reason. This will capture the unknown HRESULT returned via the COM APIs. seblalancette@chromium.org cbe-device-trust-eng@google.com Recorded when the browser received a failed response when triggering a Device Trust key rotation command. The browser will then attempt to categorize the failure using the given enum. seblalancette@chromium.org hmare@google.com cbe-device-trust-eng@google.com Recorded when a failed OSStatus code is returned from a Keychain Services API for the {KeyType} keypair during a {Operation} operation. hmare@google.com seblalancette@chromium.org Recorded when a device attempts to issue an API that interacts with the Secure Enclave signing key in the {KeyType} key storage. hmare@google.com seblalancette@chromium.org Captures any terminal failures that occur in the Device Trust management service binary during the execution of a command (e.g. key rotation). lmasopust@google.com cbe-device-trust-eng@google.com Recorded when a device starts the device trust attestation flow with a partner website. This captures if the attestation flow was triggered inside of a session or on the login screen. hmare@google.com seblalancette@chromium.org Captures any terminal failures that occur during the process of creating, storing, and loading a Device Trust signing key pair during a key rotation. seblalancette@chromium.org cbe-device-trust-eng@google.com Net error recorded when a public key upload request failed to leave the client. hmare@google.com seblalancette@chromium.org Recorded when a device attempts to rotate its device trust signing key. Chrome will retry a fixed number of times until the operation either succeeds or fails. A value of 1 means the rotation worked on the first try. hmare@google.com seblalancette@chromium.org Recorded when a device attempts to rotate its device trust signing key. {Nonce} hmare@google.com seblalancette@chromium.org HTTP status code of the key upload request recorded when a device attempts to rotate its device trust signing key. {Nonce} hmare@google.com seblalancette@chromium.org Latency recorded when the {Variant} decorator(s) finish collecting their signals. Captures the amount of time required to collect the signals under this scope. seblalancette@chromium.org cbe-device-trust-eng@google.com Captures any client-side errors that caused a key synchronization flow to fail. seblalancette@chromium.org cbe-device-trust-eng@google.com HTTP status code of the key upload request recorded when a device issues a key synchronization request. accorsi@google.com chromeos-dlp@google.com Number of non-expired file events stored in the DlpFilesController::EventStorage. It is recorded each time an entry is added or updated. poromov@chromium.org chromeos-dlp@google.com Recorded when capture mode initialization was blocked by Data Leak Prevention. aidazolic@chromium.org chromeos-dlp@google.com Recorded when the user is warned by Data Leak Prevention before capture mode initialization. poromov@chromium.org chromeos-dlp@google.com Result of Data Leak Prevention evaluation for a data read from the clipboard. aidazolic@chromium.org chromeos-dlp@google.com Recorded when an entry is evicted from DlpConfidentialContentsCache because the cache has reached its maximum size limit. aidazolic@chromium.org chromeos-dlp@google.com Number of items stored in the DlpConfidentialContentsCache. It is recorded each time a new entry is cached. poromov@chromium.org chromeos-dlp@google.com Recorded when DataTransferController is initialized, meaning that all clipboard and drag-n-drop operations will be affected by Data Leak Prevention checks. poromov@google.com chromeos-dlp@google.com Time difference between current and the latest sent Data Leak Prevention reporting events for data transfers for which sources and destinations are the same. poromov@chromium.org chromeos-dlp@google.com Recorded when non-empty Data Leak Prevention policy is present and due to that Data Leak Prevention infrastructure is initialized on the client. poromov@chromium.org chromeos-dlp@google.com Result of Data Leak Prevention evaluation for a drag-n-drop operation. accorsi@google.com chromeos-dlp@google.com Recorded when an error occurs during adaptor usage in the Data Leak Prevention daemon. accorsi@google.com chromeos-dlp@google.com Recorded when an error occurs while performing initialization operations in the Data Leak Prevention daemon. accorsi@google.com chromeos-dlp@google.com Recorded when an error occurs during fanotify usage in the Data Leak Prevention daemon. accorsi@google.com chromeos-dlp@google.com Recorded when an error occurs while performing database operations in the Data Leak Prevention daemon. accorsi@google.com chromeos-dlp@google.com Record whether an error occurs during the Data Leak Prevention files policy setup. accorsi@google.com chromeos-dlp@google.com Record whether a Data Leak Prevention event is not reported because of report queue setup issues. accorsi@google.com chromeos-dlp@google.com Record whether the kernel supports fanotify mark filesystem. accorsi@google.com chromeos-dlp@google.com Record whether the kernel supports fanotify delete events. accorsi@google.com chromeos-dlp@google.com Records when a file action is blocked because of Data Leak Prevention policy Files restriction. Identifies which file action was blocked. ayaelattar@google.com chromeos-dlp@google.com Records which file action blocked by Data Leak Prevention policy is reviewed. accorsi@google.com chromeos-dlp@google.com Records when a file action is warned because of Data Leak Prevention policy Files restriction. Identifies which file action was warned. accorsi@google.com chromeos-dlp@google.com Records which file action was warned because of Data Leak Prevention policy restrictions and proceeded by the user. ayaelattar@google.com chromeos-dlp@google.com Records which file action warning by Data Leak Prevention policy was reviewed. ayaelattar@google.com chromeos-dlp@google.com Records which file action was warned because of Data Leak Prevention policy and the warning timed out. aidazolic@google.com chromeos-dlp@google.com Records True when opening the Files App to show a Data Leak Prevention dialog times out, and False when it successfully opens. ayaelattar@google.com chromeos-dlp@google.com Records the number of files blocked by Data Leak Prevention policy per file action. poromov@chromium.org chromeos-dlp@google.com Recorded when Data Leak Prevention policy contains Files restrictions and DLP Files daemon is started because of that. brinky@chromium.org chromeos-dlp@google.com Record if we were not able to pin a source URL to a file open request and have to fallback on the default behaviour. poromov@google.com chromeos-dlp@google.com Records the resolved Data Leak Prevention file access level every time an unknown unauthorized access is being resolved over IsDlpPolicyMatched. ayaelattar@google.com chromeos-dlp@google.com Records the number of files warned by Data Leak Prevention policy per file action. poromov@chromium.org chromeos-dlp@google.com Result of Data Leak Prevention evaluation for printing. aidazolic@chromium.org chromeos-dlp@google.com Recorded when there is a "warn" level Data Leak Prevention evaluation for printing. aidazolic@chromium.org chromeos-dlp@google.com Recorded when the user proceeded with (True) or canceled (False) the action after a Data Leak Prevention warning for printing. aidazolic@chromium.org chromeos-dlp@google.com Recorded when there is a "warn" level Data Leak Prevention evaluation for a screen share, but it is caused by the content that the user was already warned about and decided to proceed, so no new warning is shown and printing is silently allowed. poromov@chromium.org chromeos-dlp@google.com Recorded when privacy screen was enforced by Data Leak Prevention. poromov@chromium.org chromeos-dlp@google.com Recorded when Data Leak Prevention event with "block" level was reported. Identifies which restriction was blocked and reported. poromov@chromium.org chromeos-dlp@google.com Result of enqueueing Data Leak Prevention event to the reporting queue. poromov@chromium.org chromeos-dlp@google.com Recorded when Data Leak Prevention event with "report" level was reported. Identifies which restriction was reported. poromov@chromium.org chromeos-dlp@google.com Recorded when Data Leak Prevention event with "warn" level was reported. Identifies which restriction was reported. poromov@chromium.org chromeos-dlp@google.com Recorded when Data Leak Prevention event with "warn" level was reported after a user proceeded with a restricted action. Identifies which restriction was reported. poromov@chromium.org chromeos-dlp@google.com Records which types of restrictions are present in Data Leak Prevention policy. accorsi@google.com chromeos-dlp@google.com Time difference between the current and the latest sent Data Leak Prevention file events for which inodes and destinations are the same. poromov@chromium.org chromeos-dlp@google.com Result of Data Leak Prevention evaluation for a screen share. poromov@chromium.org chromeos-dlp@google.com Recorded when screen share was paused (True) or resumed (False) by Data Leak Prevention. aidazolic@chromium.org chromeos-dlp@google.com Recorded when there is a "warn" level Data Leak Prevention evaluation for a screen share. aidazolic@chromium.org chromeos-dlp@google.com Recorded when the user proceeded with (True) or canceled (False) the action after a Data Leak Prevention warning for a screen share. aidazolic@chromium.org chromeos-dlp@google.com Recorded when there is a "warn" level Data Leak Prevention evaluation for a screen share, but it is caused by the content that the user was already warned about and decided to proceed, so no new warning is shown and the screen share is silently allowed. poromov@chromium.org chromeos-dlp@google.com Result of Data Leak Prevention evaluation for taking a screenshot or a video capture. aidazolic@chromium.org chromeos-dlp@google.com Recorded when there is a "warn" level Data Leak Prevention evaluation for taking a screenshot or a video capture. aidazolic@chromium.org chromeos-dlp@google.com Recorded when the user proceeded with (True) or canceled (False) the action after a Data Leak Prevention warning shown at the capture mode initialization or before taking a screenshot or a video capture. aidazolic@chromium.org chromeos-dlp@google.com Recorded when there is a "warn" level Data Leak Prevention evaluation for initiating capture mode, but it occurs during a shutdown request, so no new warning is shown and the screenshot is silently blocked. aidazolic@chromium.org chromeos-dlp@google.com Recorded when there is a "warn" level Data Leak Prevention evaluation for initiating capture mode, or taking a screenshot or a video capture, but it is caused by the content that the user was already warned about and decided to proceed, so no new warning is shown and the screen share is silently allowed. poromov@chromium.org chromeos-dlp@google.com Recorded when video capture was interrupted by Data Leak Prevention. vincb@google.com zmin@chromium.org Records the returned status of fetching cloud policies from the dmserver. Recorded when receiving the response from the dmserver upon request completion with policy type {EnterpriseDMServerCloudPolicyRequest}. rbock@google.com chromeos-commercial-remote-management@google.com managed-devices@google.com Number of retries the client did to execute a DeviceManagementServer request. It's recorded after the request has been completed, either successfully after 0 or more retries, with a failure (too many retries or non-retriable error) or with a server error. {EnterpriseDMServerRequest} morez@google.com cbe-eng@google.com Recorded when a DeviceManagementServer request fails with a server error (HTTP response code is not 200). Logs the actual HTTP response code. {EnterpriseDMServerRequest} haihan@google.com valadkevich@google.com cbe-cep-eng@google.com Tracks the success or failure of creating the cache encryption file operations factory. haihan@google.com valadkevich@google.com cbe-cep-eng@google.com Tracks the success or failure of creating the cache encryption key. haihan@google.com valadkevich@google.com cbe-cep-eng@google.com Tracks the success or failure of obtaining the hasher for the cache entries. haihan@google.com valadkevich@google.com cbe-cep-eng@google.com Tracks the success or failure of re-encrypting the primary key for the cache. haihan@google.com valadkevich@google.com cbe-cep-eng@google.com Tracks the success or failure of retrieving the primary key for the cache from profile prefs. haihan@google.com valadkevich@google.com cbe-cep-eng@google.com Records the index of the chunk which failed to decrypt in the enterprise encrypted cache file when {DecryptionSource}. haihan@google.com valadkevich@google.com cbe-cep-eng@google.com Records the detailed failure code when an operation on the encrypted cache file fails due to decryption when {DecryptionSource}. haihan@google.com valadkevich@google.com cbe-cep-eng@google.com Records the result of {Operation} in the enterprise encrypted cache file. igorcov@chromium.org chromeos-commercial-remote-management@google.com Whether loading of device policy from file on an enterprise-enrolled (checked against install_attributes.pb) Chrome OS device yields an enterprise policy. Filled once during session startup, after first successful device policy read. igorcov@chromium.org chromeos-commercial-remote-management@google.com Whether loading of device policies from file on an enterprise-enrolled (checked against install_attributes.pb) Chrome OS device yields a PolicyData message with a DMToken. Filled once during session startup, after first successful device policy read. asumaneev@google.com sergiyb@chromium.org chromeos-commercial-remote-management@google.com Events related to device enrollment on new installs of Chrome OS devices. asumaneev@google.com sergiyb@chromium.org chromeos-commercial-remote-management@google.com Events related to attestation-based enrollment (Zero-Touch) of Chrome OS devices. Warning: this histogram was expired from 2021-12-05 to 2022-02-01. Data may be missing. asumaneev@google.com sergiyb@chromium.org chromeos-commercial-remote-management@google.com Events related to forced re-enrollment (FRE) of Chrome OS devices. asumaneev@google.com sergiyb@chromium.org chromeos-commercial-remote-management@google.com Events related to attestation-based re-enrollment (Auto RE) of Chrome OS devices. asumaneev@google.com sergiyb@chromium.org chromeos-commercial-remote-management@google.com Events related to forced initial enrollment of Chrome OS devices during the first startup of a device. asumaneev@google.com sergiyb@chromium.org chromeos-commercial-remote-management@google.com Events related to attestation-based initial enrollment (Zero-Touch) of Chrome OS devices during the first startup of a device. asumaneev@google.com sergiyb@chromium.org chromeos-commercial-remote-management@google.com Events related to manual fallback from attestation-based initial enrollment (Zero-Touch) of Chrome OS devices during the first startup of a device. asumaneev@google.com sergiyb@chromium.org chromeos-commercial-remote-management@google.com Events related to manual fallback from attestation-based re-enrollment (Auto RE) of Chrome OS devices. Warning: this histogram was expired from 2021-12-05 to 2022-02-01. Data may be missing. andreydav@google.com chromeos-commercial-identity@google.com Recorded when we fetch the value of enrollment nudge policy. Tracks the value of the policy or the absence of it in the server response. andreydav@google.com chromeos-commercial-identity@google.com Tracks user actions on the enrollment nudge pop-up on the Gaia screen. Recorded when user clicks on one of the buttons there. Warning: this histogram was expired from 2025-09-07 to 2025-12-16; data may be missing. asumaneev@google.com sergiyb@chromium.org chromeos-commercial-remote-management@google.com Events related to Chrome OS enterprise enrollment recovery. Note that this only covers cases in which prior to recovery, UMA stats are enabled by policy. jacksontadie@google.com drcrash@google.com cros-onboarding-team@google.com chromeos-commercial-remote-management@google.com Events related to Remote Deployment enrollments, a subset of token-based enrollment. As of writing, only Flex devices use Remote Deployment. Events are recorded in response to a successful or failed enrollment. jacksontadie@google.com drcrash@google.com cros-onboarding-team@google.com chromeos-commercial-remote-management@google.com Events related to manual fallback from Remote Deployment enrollment, a subset of token-based enrollment. Events are recorded in response to a successful or failed enrollment. rbock@chromium.org chromeos-commercial-remote-management@google.com Events related to attestation based re-enrollment after enterprise rollback. Events are recorded during enrollment after rollback and types are listed in the MetricEnrollment enum. rbock@chromium.org chromeos-commercial-remote-management@google.com Events related to manual re-enrollment after enterprise rollback. This is used when attestation based enrollment fails. Events are recorded during enrollment after rollback and types are listed in the MetricEnrollment enum. asumaneev@google.com sergiyb@chromium.org chromeos-commercial-remote-management@google.com Elapsed time from *after* GAIA login until enrollment was cancelled. asumaneev@google.com sergiyb@chromium.org chromeos-commercial-remote-management@google.com Elapsed time from *after* GAIA login until enrollment failed. asumaneev@google.com sergiyb@chromium.org chromeos-commercial-remote-management@google.com Elapsed time from *after* GAIA login until enrollment succeeded. jacksontadie@google.com drcrash@google.com cros-onboarding-team@google.com chromeos-commercial-remote-management@google.com Events related to token-based enrollment on ChromeOS devices. As of writing only Flex devices use token-based enrollment, to perform Flex Auto Enrollment. Events are recorded in response to a successful or failed enrollment. jacksontadie@google.com drcrash@google.com cros-onboarding-team@google.com chromeos-commercial-remote-management@google.com Events related to manual fallback from token-based enrollment on ChromeOS devices. As of writing only Flex devices use token-based enrollment, to perform Flex Auto Enrollment. Events are recorded in response to a successful or failed enrollment. iremuguz@google.com chromeos-commercial-supportability@google.com The result of event based log upload that is of type {EventLogUploadType}. ssolarewicz@chromium.org cec-growth@google.com Records the reason for which an authentication URL request has failed for Okta SSO. Emitted in enterprise_auth::URLSessionURLLoader::OnRequestFailed if the request fails for any reason. ssolarewicz@chromium.org cec-growth@google.com Records whether a URLSession request made to perform Okta SSO authentication was successful. Emitted in enterprise_auth::URLSessionURLLoader::OnRequestComplete or OnRequestFailed upon completion or failure of the request. ssolarewicz@chromium.org cec-growth@google.com The duration of a {Status} URLSession request made to perform SSO authentication for Okta services. Emitted in enterprise_auth::URLSessionURLLoader::OnRequestComplete or OnRequestFailed upon completion or failure of the request. ydago@chromium.org cec-growth@google.com The success or failure of trying to authenticate a navigation request using Extensible Enterprise SSO for a url that can be authenticated by the OS. ydago@chromium.org cec-growth@google.com The duration of the interception for ExtensibleEnterpriseSSO for a url that {Status}. eliashomsi@google.com nancylanxiao@google.com cbe-cep-eng@google.com Records the size of files being scanned for a file content analysis request. These requests happen for CEP to scan downloaded and uploaded files for DLP rules. eliashomsi@google.com nancylanxiao@google.com cbe-cep-eng@google.com Records the size of printed pages being scanned for a file content analysis request. These requests happen for CEP to scan printed pages for DLP rules. It is logged once per user action that would trigger this Connector. valadkevich@google.com cbe-cep-eng@google.com Records the time it takes to cancel the FileOpeningJob. The cancellation waits for currently running file analysis tasks to yield or complete. This provides a measure of how long the UI thread or other threads might block while waiting for the background job to finish. haihan@google.com domfc@chromium.org thelex@google.com Records the result of file obfuscation related operations. {Operation} : The context of the operation. {Action} : The specific action. seblalancette@chromium.org hmare@google.com Device management server status returned when requesting a profile-level attestation challenge for enterprise reporting. antoli@google.com cbe-cep-eng@google.com Records the time it takes to evaluate HttpHeaderInjection rules. This is measured for a subsample of 0.1% of every network request when the policy is enabled, right before the headers are sent. This metric is reported only for clients with high-resolution clocks. antoli@google.com cbe-cep-eng@google.com Records whether a network request was modified by the HttpHeaderInjection policy. Emitted for a subsample of 0.1% of every network request when the policy is enabled, right before headers are sent. True if headers were injected, false otherwise. esalma@google.com nicolaso@chromium.org Whether the {ActionType} ran successfully or not. The metric is recorded as true if the action runs successfully and false if the action fails. esalma@google.com nicolaso@chromium.org The time taken to run {ActionType} on idle timeout. esalma@google.com nicolaso@chromium.org On mobile: whether idle timeout happened while the app was already foregrounded or backgrounded. The metric is recorded when idle timeout is detected while the app is foreground and when idle timeout is detected on reforeground or start-up. esalma@google.com nicolaso@chromium.org Tracks events related to the timeout dialog shown to the user for 30 seconds before idle timeout actions run. The user either responds by clicking the button in the dialog indicating activity or the dialog expires and actions run. esalma@google.com nicolaso@chromium.org Tracks events related to the launch screen shown on mobile when idle timeout actions run on app foreground. The launch screen can be dismissed after actions complete or after it has reached its expiry deadline. haihan@google.com nancylanxiao@google.com cbe-cep-eng@google.com Records the size of the url chain, from the iframe where the content analysis request for {DeepScanAccessPoint} was triggered from all the way to the tab url, inclusive. A size of 1 means that the action did not come from an iFrame, and the chain size limit is set to `kMaxFrameUrls`. igorcov@chromium.org emaxx@chromium.org chromeos-commercial-remote-management@google.com Whether the install attributes are valid on the enrolled device. Device is determined to be enrolled based on the device policy. The check is performed at device boot. emaxx@chromium.org igorcov@chromium.org vsavu@google.com chromeos-commercial-remote-management@google.com Chrome OS only. Result of checking if device policy files are valid when reading the device policy data. mxlg@google.com bling-enterprise@google.com Records the event result of a download protection scan triggered by enterprise users when trying to download files according to policy settings. mxlg@google.com bling-enterprise@google.com Records whenever a user sees a warning and chooses to ignore/bypass the warning and decides to download the file anyway. eic@google.com bling-enterprise@google.com Records the level of verdict triggered by enterprise users when trying to {Action} web content according to the policy settings. eic@google.com bling-enterprise@google.com Records whenever a user sees a warning and chooses to ignore/bypass the warning and decides to {Action} anyways. anaercegovac@google.com cep-se@google.com Records the verdict of the Data Controls policy check for a user clicking the "Search [Default Search Engine] with [selected text]" button. Increases in 'WARN' counts within this histogram indicate potential data exfiltration being actioned by the policy. The 'BLOCK' bucket is expected to be empty since the 'Search' item is hidden for block verdicts. igorcov@chromium.org emaxx@chromium.org chromeos-commercial-remote-management@google.com Result of key signature verification from the policy data. fahadmansoor@google.com chromeos-commercial-identity@google.com Recorded whenever the local auth factors policy is evaluated to determine if online reauth should be forced. Recorded as true if forced, and false otherwise. fahadmansoor@google.com chromeos-commercial-identity@google.com Recorded whenever a local auth factor (PIN or local password) is changed for a user under the local auth factors policy. Tracks which factor was changed. fahadmansoor@google.com chromeos-commercial-identity@google.com Recorded whenever the password complexity policy is updated. Tracks the enforced complexity level. mpetrisor@chromium.org imprivata-eng@google.com ChromeOS only. Records if cleanup handler succeeded. mpetrisor@chromium.org imprivata-eng@google.com ChromeOS only. Records the duration the cleanup handler took. igorruvinov@chromium.org zmin@chromium.org Records whether browser unenrollment via DMToken deletion completed successfully after attempting to delete the token. zmin@chromium.org pastarmovj@chromium.org Time since the enrollment request was made until a successful enrollment response is returned from the server. zmin@chromium.org pastarmovj@chromium.org The result of machine level user cloud policy enrollment. zmin@chromium.org pastarmovj@chromium.org Records whether the machine level user cloud policy enrollment dialog is shown to the user and the action they took. zmin@chromium.org pastarmovj@chromium.org The length of time the machine level user cloud policy enrollment dialog was visible to the user. zmin@chromium.org domfc@chromium.org Records whether a browser unenrollment was completed successfully by writing an invalid DMToken to storage or not. mpetrisor@chromium.org imprivata-eng@google.com Records whether the managed screensaver is enabled. Recorded for managed devices when the sign-in screen is displayed, on every user login, and every time the ScreensaverLockScreenEnabled or DeviceScreensaverLoginScreenEnabled policy is updated. mpetrisor@chromium.org imprivata-eng@google.com Among users with managed screensaver enabled, records the length of each session for Slideshow. The metric is emitted when an ambient mode session ends. mpetrisor@chromium.org imprivata-eng@google.com Records the count of images downloaded in cache to display in the managed screensaver. Recorded every time the policy list changes and images are deleted from the cache or downloaded to the cache. mpetrisor@chromium.org imprivata-eng@google.com Records the result after attempting to download an image for the managed screensaver. Emitted on every image download operation. mpetrisor@chromium.org imprivata-eng@google.com Records the amount of time it takes for the managed screensaver to start. This includes tasks such as getting the list of downloaded images, checking that the list has a minimal amount of images, decoding them, etc. Note this measurement does not include the lock screen inactivity timeout. The metric would be emitted when the first two images are loaded successfully. ngoncharov@google.com enterprise-metrics@google.com Records the management authority of the browser (BrowserManagementService) per profile, categorizing local computer management by policy count (<=3 vs >3). Logged with every UMA log packet. Multiple samples can be logged if multiple authorities are active. ngoncharov@google.com enterprise-metrics@google.com Records the active management authority of the underlying OS/device (PlatformManagementService). Logged with every UMA log packet. Multiple samples can be logged if multiple authorities are active. xzonghan@google.com chrome-enterprise-networking-core@google.com Recorded when an Enterprise Network authentication access token request completes or fails. xzonghan@chromium.org zmin@chromium.org Records the occurrance of each crucial step of the OIDC enrollment flow before profile registration. xzonghan@chromium.org zmin@chromium.org Tracks the results of OIDC enrollment flow when it finishes before profile registration. xzonghan@chromium.org zmin@chromium.org Records the occurrance of each crucial step of the OIDC enrollment flow with a {IdentityType} 3P identity after profile registration. xzonghan@chromium.org zmin@chromium.org Tracks the results of OIDC enrollment flow with a {IdentityType} 3P identity when it finishes after profile registration. xzonghan@chromium.org zmin@chromium.org Latency of a {Result} policy fetch operation for an OIDC profile with {IdentityType} 3P identity during enrollment, recorded when the fetch response is received. xzonghan@chromium.org zmin@chromium.org Latency of a {IdentityType} OIDC profile registration operation when OIDC profiles are first getting created. Failed attempts will always be classified as undecided since we won't know whether it's dasher-based. Recorded when the registration response is received. haihan@google.com cbe-cep-eng@google.com Records the size (in bytes) of data that might have been scanned by the OnBulkDataEntry Enterprise Connector, specifically for the Actor access point (e.g., Glic Paste). It is logged once per user action that triggers this Connector. domfc@chromium.org webprotect-team@google.com Records the size (in bytes) of data that might have been scanned by the OnBulkDataEntry Enterprise Connector. It is logged once per user action that would trigger this Connector. igorruvinov@chromium.org zmin@chromium.org The number of proof-of-possession cookies retrieved from the platform to authenticate the user to their IdP/STS. Recorded once per successful fetch. igorruvinov@chromium.org zmin@chromium.org The HRESULT returned by either CoCreateInstance or GetCookieInfoForUri when trying to fetch proof-of-possession cookies from the platform to authenticate the user to their IdP/STS. igorruvinov@chromium.org chromium-enterprise@chromium.org Recorded when an incoming request for proof-of-possession cookies from the platform is dropped because the maximum number of enqueued requests has been reached. igorruvinov@chromium.org zmin@chromium.org The elapsed time for a fetch of proof-of-possession cookies from the platform to authenticate the user to their IdP/STS to {Result}. Recorded once per fetch. vsavu@google.com asumaneev@google.com chromeos-commercial-remote-management@google.com A set of enterprise policy rules that are in use. This is recorded every 24 hours and at startup, if the last recording was earlier than a day before. zmin@chromium.org igorruvinov@chromium.org chromeos-commercial-remote-management@google.com Record summary of sources of all policies. It's recorded ever 24 hours and at startup. This does not include user cloud policy and some special policy sources like enterprise_default. zmin@chromium.org qiutanw@google.com chromeos-commercial-remote-management@google.com A set of {PolicyLevel} enterprise policy rules that are in use. This is recorded for each {PolicyLevel} policy every 24 hours and at startup, if the last recording was earlier than a day before. nicolaso@chromium.org zmin@chromium.org Record whether profile has successfully fetched policy with profile id once before uploading reporting. Recorded during profile creation. iOS only. zmin@chromium.org cec-growth@google.com Wall-clock time spent in Context.registerReceiver() for the AbstractAppRestrictionsProvider broadcast receiver on Android. Recorded once per browser startup on a background thread, after the synchronous Binder IPC into system_server returns. Used to quantify the latency that previously caused UI-thread ANRs. asumaneev@google.com chromeos-commercial-remote-management@google.com Events for counting user policy invalidations received with and without payloads. Invalidations indicate that a policy has been updated and should be refreshed. Payloads provide context about the policy update, but may be absent if dropped by the invalidation service. nicolaso@chromium.org enterprise-policy-review@google.com Records the number of policy log messages stored in memory. Recorded periodically every 24 hours. The logs are {CompressionState}. nicolaso@chromium.org enterprise-policy-review@google.com Records the estimated memory size in bytes of policy logs stored in memory. Recorded periodically every 24 hours. The logs are {CompressionState}. asumaneev@google.com chromeos-commercial-remote-management@google.com Events measuring effectiveness of refreshing user policy when invalidations are received from a service. For each refresh, indicates whether the policy changed, and whether the policy was invalidated at the time of the refresh. ftirelo@chromium.org zmin@chromium.org The amount of time required for full initialization of the PolicyService, measured from the moment the object is created until policies are ready. {Scope} {PolicyCountSuffix} zmin@chromium.org src/components/policy/OWNERS The total number of time {ButtonType} button has been clicked for each time chrome://policy page is opened. Recorded once the page is closed. Export To JSON button is not available on iOS. Note that we won't be able to collect the data if the page is not closed normally. For example, browser is crash or shutdown by OS which often happens on mobile platforms. rbock@google.com igorcov@chromium.org chromeos-commercial-remote-management@google.com Time since last device policy fetch. Emitted when policies are loaded. zmin@chromium.org pastarmovj@chromium.org Time since last machine level user policy fetch.. Emitted when policies are loaded. rbock@google.com igorcov@chromium.org chromeos-commercial-remote-management@google.com Time since last user policy fetch. Emitted when policies are loaded. poromov@chromium.org chromeos-commercial-remote-management@google.com Tracking the results of policy user verification. igorruvinov@chromium.org cbe-magic@google.com Whether the current profile is affiliated. Recorded for each active profile every 7 days and upon profile policy service initialization. igorruvinov@chromium.org cbe-magic@google.com The reason why the current profile is not affiliated. Recorded for each unaffiliated active profile every 7 days and upon profile policy service initialization. hmare@google.com cbe-device-trust-eng@google.com Recorded in the event of failures during the profile identifier generation action. hmare@google.com cbe-device-trust-eng@google.com Records whether the profile identifier generation action was successful or not. ydago@chromium.org zmin@chromium.org The Http statuses returned by the server when trying to get the ManagedAccountsSigninRestriction policy value for individual dasher accounts. This is recorded after trying to the the policy value, when the status is available. Warning: this histogram was expired from 2025-07-01 to 2026-04-15; data may be missing. ydago@chromium.org zmin@chromium.org The network errors that happen when trying to get the ManagedAccountsSigninRestriction policy value for individual dasher accounts. This is recorded every time after trying to the the policy value. Warning: this histogram was expired from 2025-07-01 to 2026-04-15; data may be missing. xzonghan@google.com chrome-enterprise-networking-core@google.com Recorded when a Provisioning Domain configuration fetch finishes or fails. xzonghan@google.com chrome-enterprise-networking-core@google.com Recorded the result of a Provisioning Domain (PvD) JSON configuration fetch. xzonghan@google.com chrome-enterprise-networking-core@google.com Recorded when a Provisioning Domain fetch completes with an HTTP error code. xzonghan@google.com chrome-enterprise-networking-core@google.com Recorded when a Provisioning Domain fetch fails due to a network error. xzonghan@google.com chrome-enterprise-networking-core@google.com Recorded when an alternative error page HTML is generated for an Enterprise Proxy disguised error, logging the disguised HTTP response or error code. bfranz@chromium.org chromeos-kiosk-eng@google.com A public session starts when a user signs in using the policy configured public account. It stops when the user signs out. Session length is the duration between the start and stop events. It is recorded during signing out and reported on the next chrome run. This metric tracks the recorded session length rounded down to the nearest 10-minute bucket and capped at 24 hours. igorcov@chromium.org chromeos-commercial-remote-management@google.com Chrome tries to load the refresh token at start. The result of that operation is logged in this histogram, success corresponding to true. zmin@chromium.org ydago@chromium.org Record number of the re-registration event when profile is loaded, likely due to policy cache loading failure. The event is categorized by Gaia account presence and existing registration status. This is different than the re-registrations on CrOS that are triggered with the device not found error. bfranz@chromium.org chromeos-kiosk-eng@google.com A regular user session starts when a user signs in using their user account. It stops when the user signs out. Session length is the duration between the start and stop events. It is recorded during signing out and reported on the next chrome run. This metric tracks the recorded session length on an enrolled device rounded down to the nearest 10-minute bucket and capped at 24 hours. fahadmansoor@google.com chromeos-commercial-identity@google.com Recorded whenever the RemoveLocalAuthFactors screen is shown to the user. fahadmansoor@google.com chromeos-commercial-identity@google.com Tracks the result of the local auth factor removal process. Recorded as true when all local auth factors are successfully removed, and false if any part of the removal process fails. domfc@chromium.org xanth@google.com nancylanxiao@google.com cbe-cep-eng@google.com The size of the UploadEventsRequest for {EventType} events sent to the reporting server, in bytes. This is recorded once per upload request when the payload is generated in RealtimeReportingJobConfiguration::GetPayload. nancylanxiao@google.com domfc@chromium.org xanth@google.com cbe-cep-eng@google.com Record the duration from attempting to upload {EventType} events to the reporting server to get the {UploadResult} measured in milliseconds. It is logged once per upload request, when the upload finishes. xanth@google.com alshawwa@chromium.org domfc@chromium.org Failures to upload reporting events to the reporting server bucketed by event type. Expired in June 2024. Revived in M133 for monitoring upcoming work on the reporting pipeline. xanth@google.com alshawwa@chromium.org domfc@chromium.org Reporting events successfully uploaded to the reporting server bucketed by event type. Expired in June 2024. Revived in M133 for monitoring upcoming work on the reporting pipeline. nancylanxiao@google.com domfc@chromium.org cbe-cep-eng@google.com Records the duration of a {ResumableRequestCheckType} check part of a broader {ContentAnalysisRequestType} Resumable request. It is logged once per user action that would trigger this Connector. ftirelo@chromium.org ljjlee@google.com cbe-eng@google.com The latency of the request to the SafeSites API to classify URLs for users with the SafeSitesFilterBehavior policy. This is measured once per classified URL that requires a network request (URLs returned from the cache are not recorded). andreydav@google.com chromeos-commercial-identity@google.com Latency of a SecondaryGoogleAccountUsage policy fetch request. This measures the amount of time required to fetch the policy value of SecondaryGoogleAccountUsage from the Secure Connect API. This is recorded when a user account is added as a secondary account (in-session). Warning: this histogram was expired from 2024-12-11 to 2026-02-05; data may be missing. andreydav@google.com chromeos-commercial-identity@google.com Tracks the result of UserCloudSigninRestrictionPolicyFetcher::GetSecondaryGoogleAccountUsage. This is recorded when a user account is added as a secondary account (in-session). xzonghan@google.com chrome-enterprise-networking-core@google.com Recorded the result of evaluating a 407 Proxy Authentication challenge against managed dynamic routes in EnterpriseProxyService. This is recorded when Chrome receives and tries to handle a 407 proxy authentication challenge for the CONNECT call. xzonghan@chromium.org cbe-device-trust-eng@google.com The method of how security signals is uploaded xzonghan@chromium.org cbe-device-trust-eng@google.com The source trigger of security signals-only reports ssolarewicz@chromium.org cec-growth@google.com Records when the Learn More link is clicked on the Enterprise Signals Disclaimer modal dialog shown on browser startup. ssolarewicz@chromium.org cec-growth@google.com Records the result of the Enterprise Signals Disclaimer modal dialog shown on browser startup for managed profiles missing device signals collection consent. Emitted when the modal dialog is accepted, declined, or dismissed. ssolarewicz@chromium.org cec-growth@google.com Records when the Enterprise Signals Disclaimer modal dialog is shown on browser startup for managed profiles missing device signals collection consent. ssolarewicz@chromium.org cec-growth@google.com Records the reason why the Enterprise Signals Disclaimer modal dialog was not shown on browser activation. ssolarewicz@chromium.org cec-growth@google.com Records when the Learn More link is clicked on the Enterprise Signals Disclaimer view shown in the Profile Picker. ssolarewicz@chromium.org cec-growth@google.com Records the result of the Enterprise Signals Disclaimer shown in the Profile Picker after selecting a managed profile missing the device signals consent. Emitted when the view is accepted, declined, or dismissed. ssolarewicz@chromium.org cec-growth@google.com Records when the Enterprise Signals Disclaimer view is shown in the Profile Picker after selecting a managed profile missing device signals collection consent. esalma@google.com austinzzr@google.com cbe-productivity-eng@google.com Records the number of valid enterprise skills provided by the EnterprisePublishedSkills policy after they have been successfully parsed. esalma@google.com austinzzr@google.com cbe-productivity-eng@google.com The time it takes to fetch an enterprise skill definition from its URL. Recorded when the network request completes, regardless of success. esalma@google.com austinzzr@google.com cbe-productivity-eng@google.com Records whether the enterprise skill was successfully fetched from its URL on request completion. esalma@google.com austinzzr@google.com cbe-productivity-eng@google.com Records validation errors and invalid skills encountered when parsing the EnterprisePublishedSkills policy. Recorded by the policy handler during policy validation. esalma@google.com austinzzr@google.com cbe-productivity-eng@google.com Records the outcome of parsing and validating an enterprise skill file fetched from its URL. aidazolic@google.com src/chrome/browser/ash/policy/skyvault/OWNERS Records whether local storage is enabled (default) or disabled by policy. aidazolic@google.com src/chrome/browser/ash/policy/skyvault/OWNERS Records whether SkyVault is misconfigured: Local file storage is disabled, and the DownloadsDirectory policy, which also determines the default location for the Files app, is not set to a cloud location (e.g. Google Drive). This may cause the Files app to display incorrect folder information. aidazolic@google.com src/chrome/browser/ash/policy/skyvault/OWNERS Recorded when SkyVault deletion of local files is retried. aidazolic@google.com src/chrome/browser/ash/policy/skyvault/OWNERS Recorded when SkyVault migration of local files is reset during session initialization, due to policy changing since the last session to either allow local storage or disable the migration. aidazolic@google.com src/chrome/browser/ash/policy/skyvault/OWNERS Recorded when SkyVault migration of local files is retried after some non-fatal errors. aidazolic@google.com src/chrome/browser/ash/policy/skyvault/OWNERS Recorded when an error occurs while setting the local storage write access. aidazolic@google.com src/chrome/browser/ash/policy/skyvault/OWNERS The total duration of the file upload as part of the SkyVault migration of local files to {CloudProvider}, which can span multiple sessions. Recorded only if the upload fails. Includes potential retries. aidazolic@google.com src/chrome/browser/ash/policy/skyvault/OWNERS Recorded when SkyVault migration of local files to {CloudProvider} cannot proceed because the policies to enable the required cloud storage aren't set properly. aidazolic@google.com src/chrome/browser/ash/policy/skyvault/OWNERS The duration, in milliseconds, that a SkyVault migration file upload to {CloudProvider} waited for network reconnection. Recorded only when `Enterprise.SkyVault.Migration.{CloudProvider}.WaitForConnection` is true and the connection was successfully re-established. aidazolic@google.com src/chrome/browser/ash/policy/skyvault/OWNERS The total duration of the file upload as part of the SkyVault migration of local files to {CloudProvider}, which can span multiple sessions. Recorded only if the upload completes successfully. Includes potential retries. aidazolic@google.com src/chrome/browser/ash/policy/skyvault/OWNERS Records upload errors that occur during SkyVault migration of local files to {CloudProvider}. aidazolic@google.com src/chrome/browser/ash/policy/skyvault/OWNERS Indicates whether a SkyVault migration file upload to {CloudProvider} was delayed due to a lack of network connectivity. True if the upload was delayed, false if it started immediately. aidazolic@google.com src/chrome/browser/ash/policy/skyvault/OWNERS Records whether an error occured while cleaning up local files and directories, after migrating local files to {MigrationDestination}, in case of cloud destination, or just deleting them. aidazolic@google.com src/chrome/browser/ash/policy/skyvault/OWNERS Records user interactions with the migration dialog displayed 24 hours before the scheduled migration to {MigrationDestination} or deletion of local files. aidazolic@google.com src/chrome/browser/ash/policy/skyvault/OWNERS Recorded when initiating the display of the migration information dialog. A value of "true" indicates the dialog was shown to the user. A value of "false" indicates the dialog was not shown, typically because a previous dialog was already displayed. aidazolic@google.com src/chrome/browser/ash/policy/skyvault/OWNERS Recorded when SkyVault migration to {MigrationDestination} or deletion is enabled and that all policies are configured properly, i.e. local storage is blocked, migration destination is set to {MigrationDestination} and, in case of a cloud destination, the required cloud storage is enabled. aidazolic@google.com src/chrome/browser/ash/policy/skyvault/OWNERS Recorded when SkyVault migration to {MigrationDestination} or deletion of local files fails. This means that at least one file couldn't be uploaded to the cloud due to a non retryable error, in case of a cloud destination, or deleted e.g. due to file permissions or other errors. aidazolic@google.com src/chrome/browser/ash/policy/skyvault/OWNERS Records whether the scheduled migration start time was in the past when `InformUser()`, which shows the first dialog for {MigrationDestination}. This can occur e.g. if the device was turned off for an extended period after the start time was initially set in a previous session. aidazolic@google.com src/chrome/browser/ash/policy/skyvault/OWNERS Records whether the scheduled migration start time was in the past when `ScheduleMigrationAndInformUser()`, which re-shows the dialog closer to the migration, was called for {MigrationDestination}. This is less likely to occur under normal circumstances and could indicate a bug in the code, or a scenario where the function was called very close to the scheduled expiration time. Frequent occurrences should be investigated. aidazolic@google.com src/chrome/browser/ash/policy/skyvault/OWNERS Recorded when SkyVault migration to {MigrationDestination} or deletion of local files is stopped due to policy update to allow local storage, disable migration, or change the migration destination. aidazolic@google.com src/chrome/browser/ash/policy/skyvault/OWNERS Recorded when an unexpected state transition happens during SkyVault migration to {MigrationDestination} or deletion of local files. Records the unexpected state value. aidazolic@google.com src/chrome/browser/ash/policy/skyvault/OWNERS Recorded when an unexpected state transition happens during SkyVault migration to {MigrationDestination} or deletion of local files. Records the context in which the wrong state error occurred. aidazolic@google.com src/chrome/browser/ash/policy/skyvault/OWNERS Recorded when deleting the local file fails following a successful copy to the cloud storage. aidazolic@google.com src/chrome/browser/ash/policy/skyvault/OWNERS Recorded when sign in to OneDrive, required to complete file upload initiated by {Action}, fails. Note that this also captures sign-in requests cancelled by the user. sergiyb@google.com chromeos-commercial-remote-management@google.com Captures state of device identifiers during state determination. sergiyb@google.com chromeos-commercial-remote-management@google.com Captures situations when state determination is enabled. sergiyb@google.com chromeos-commercial-remote-management@google.com Tracks whether state {State} returned by the server was initial (true), i.e. device is not enrolled into any domain because it is brand new or has been deprovisioned, or secondary (false), i.e. device is already managed and needs to retrieve its state because it has been powerwashed. sergiyb@google.com chromeos-commercial-remote-management@google.com Captures situations when state determination takes place on Flex devices. sergiyb@google.com chromeos-commercial-remote-management@google.com Captures ownership state of device during state determination. sergiyb@google.com chromeos-commercial-remote-management@google.com Tracks whether PSM has reported that state is available during state determination. sergiyb@google.com chromeos-commercial-remote-management@google.com Tracks the final errors due to which state keys failed to be retrieved. Errors which are hidden by the retries are not reported. sergiyb@google.com chromeos-commercial-remote-management@google.com Tracks whether state request returned state during state determination. sergiyb@google.com chromeos-commercial-remote-management@google.com Captures the status of state determination: whether it is enabled and why. sergiyb@google.com chromeos-commercial-remote-management@google.com Tracks the total duration of state determination. sergiyb@google.com chromeos-commercial-remote-management@google.com Tracks the total duration of state determination when it results in {State} state. sergiyb@chromium.org chromeos-commercial-remote-management@google.com Device management server request status for {RequestType} requests to Device Management server. sergiyb@chromium.org chromeos-commercial-remote-management@google.com Network error code for {RequestType} requests to Device Management server. ayaelattar@chromium.org poromov@chromium.org Shows which system features are set to be disabled by SystemFeaturesDisableList policy. Recorded when the policy preference is updated with a new system feature. No-op updates aren't counted. seblalancette@chromium.org cbe-device-trust-eng@google.com Captures the actual error whenever parsing of {Signal} from WMI results failed. seblalancette@chromium.org cbe-device-trust-eng@google.com Captures the actual error whenever collection of {Signal} from WMI failed with a query error. seblalancette@chromium.org cbe-device-trust-eng@google.com Captures the actual error whenever parsing of AntiVirus info from WSC results failed. seblalancette@chromium.org cbe-device-trust-eng@google.com Captures the actual error whenever collection of AntiVirus info from WSC failed with a query error. seblalancette@chromium.org cbe-device-trust-eng@google.com Captures the response parsing error rate whenever collecting {Signal}. emaxx@chromium.org Duration between when the construction of the policy stack for a user profile starts and when its initialization gets unthrottled. Only reported on ChromeOS Ash, only for managed users who are primary users in the given session. The values are capped at around 5 seconds, and timeouts are reported as this upper boundary value as well. justinoue@google.com chromeos-flex-eng@google.com Records the result of a token-based enrollment that was triggered by the following OOBE config source: {OobeConfigSource}. Events are recorded in response to a successful or failed token-based enrollment attempt. vincb@google.com zmin@chromium.org Records the http error code when there is a network error that comes with a http error code. Recorded at the end of an user info fetch if there is a network error that comes with a http error code. vincb@google.com zmin@chromium.org Records the status of fetching user info when doing registration for user policy. Recorded at the end of each user info fetch. vincb@google.com ftirelo@chromium.org Records the number of user policies that are active when using a managed account. Recorded once during the profile's browsing session on the first policy update after signing in with a managed account. longbowei@google.com zhangwenyu@google.com michaelpg@chromium.org Failure reason for OAuth token fetch for child user. igorcov@chromium.org asumaneev@google.com chromeos-commercial-remote-management@google.com Service error during OAuth2 access token fetch. There is a gap in data as the histogram was expired from 2022-03-01 till 2023-02-09. hendrich@chromium.org rbock@google.com chromeos-commercial-remote-management@google.com managed-devices@google.com Re-registration results after failed policy fetch. asumaneev@google.com chromeos-commercial-remote-management@google.com Events for counting status of executed user remote commands. The metric includes only signed user remote commands. Reports a final status of finished remote command (e.g. success, failure or termination). {Enterprise_RemoteCommandType} asumaneev@google.com chromeos-commercial-remote-management@google.com Events for counting received user remote commands. The metric includes signed user remote commands, both valid and invalid. Valid remote command is counted by its type. Invalid remote command is counted by a reason why it is considered invalid (e.g. unknown type or duplication). asumaneev@google.com chromeos-commercial-remote-management@google.com Events for counting user remote commands invalidations received with and without payloads. Invalidations indicate that there is a remote command to execute. Payloads provide context about the remote commands update, but may be absent if dropped by the invalidation service. Metric is similar to Enterprise.PolicyInvalidations. lmasopust@google.com cbe-device-trust-eng@google.com Recorded when building a response for a challenge from Verified Access server for remote attestation during SAML authentication. This captures if Device Trust is configured alongside Verified Access for the current endpoint or not. igorcov@chromium.org tnagel@chromium.org chromeos-commercial-remote-management@google.com The status code (exit code or signal) from VPD update operation (Chrome OS). adamkl@google.com cbe-cep-eng@google.com Records the timezone evaluation type used when rendering enterprise DLP watermarks. nancylanxiao@google.com domfc@chromium.org cbe-cep-eng@google.com Records the duration of scanning requests, parametrized by the protocol used and the type of content that's uploaded. It is logged once per user action that would trigger this Connector. nancylanxiao@google.com domfc@chromium.org cbe-cep-eng@google.com Records the result of scanning requests, parametrized by the protocol used and the type of content that's uploaded. It is logged once per user action that would trigger this Connector. domfc@chromium.org chrome-enterprise-data-protection@google.com Number of files in {FileUploadEvent} that was cancelled. Recorded every time files were cancelled before scan completion. domfc@chromium.org chrome-enterprise-data-protection@google.com Duration of the scan from the moment files were selected until the scan was cancelled in {FileUploadEvent}. Recorded every time files were cancelled before scan completion. alxchn@google.com cbe-cep-eng@google.com The duration of a {LocalOrCloud} {DeepScanAccessPoint} content analysis which had the {FinalResult} result, measured from the time it was created to when all scans the data requires return verdicts. austinzzr@chromium.org esalma@google.com Record the action the user takes when the promotion banner is shown on the chrome://{Page} page. The action can be to either dismiss the page or click on a button. austinzzr@chromium.org esalma@google.com Records the number of times the promotion banner on chrome://{Page} is visited and displayed or visited but not displayed. alshawwa@chromium.org nancylanxiao@google.com cbe-cep-eng@google.com Records the number of files uploaded for {UploadEvent} events. It is recorded once per user action. The user action may be a drag and drop event, or a file system dialog to upload multiple files. alxchn@chromium.org cbe-cep-eng@google.com Counts how many {UploadEvent} upload user actions received a 429 (too many requests) response. Only recorded once per file upload user action, even though each action may contain multiple uploads. igorruvinov@chromium.org ydago@chromium.org pastarmovj@chromium.org zmin@chromium.org Time elapsed for checking the Azure AD join status. This is only recorded once during the first successful join status check. ydago@chromium.org pastarmovj@chromium.org Whether the machine is part of an AD domain. This check is performed once at start-up on Windows. olsen@chromium.org chromeos-commercial-remote-management@google.com A set of policy rules that failed validation due to unparsable JSON, or JSON that did not match the schema. This validation happens on start-up and when the policy has changed. The histogram was expired (not recording data) from 2020-06-18 until 2021-03-15 and from 2021-07-01 to 2022-10-23 and from 2024-12-01 to 2025-03-11. Data may be missing. pastarmovj@chromium.org ydago@chromium.org A set of policy rules that were ignored due to integrity violations while parsing the policy data which happens on start-up and when the policy has changed. pastarmovj@chromium.org zmin@chomium.org The number of disabled policy entries on Windows due to integrity violations while parsing the policy data which happens on start-up and when the policy has changed. pastarmovj@chromium.org zmin@chromium.org Whether the machine is joined to an AD domain. This check is performed once at start-up on Windows and Mac. pastarmovj@chromium.org zmin@chromium.org Whether the machine is considered an enterprise user. An enterprise user is either in a domain, either local or cloud via AAD. This check is performed once at start-up on Windows. yeroshkin@chromium.org zmin@chromium.org Whether the machine is considered an enterprise user. An enterprise user is either in a domain, either local or cloud via AAD (strict join type check). This check is performed once at start-up on Windows. twellington@google.com tedchcoc@chromium.org On Android (OS version Lollipop+): Whether the device has a "device owner" app installed. This check is performed once on application start-up. igorruvinov@chromium.org ydago@chromium.org pastarmovj@chromium.org zmin@chromium.org Whether the machine is joined to an Azure AD domain or the user has added one or more work/school accounts to their login session. This check is performed once at start-up on Windows. yeroshkin@chromium.org zmin@chromium.org Whether the machine is joined to an Azure AD domain (strict join type check). This does not return true if there are only Azure AD work/school accounts added. This check is performed once at start-up on Windows. zmin@chromium.org pastarmovj@chromium.org Whether the full machine name is the same as the short one, identifying a local machine. This check is performed once at start-up on Windows. zmin@chromium.org pastarmovj@chromium.org Whether the currently logged in user is a local user or not, based on its SAM compatible user name and machine name. This check is performed once at start-up on Windows. zmin@chromium.org pastarmovj@chromium.org On Windows: Whether the machine is managed via MDM. On macOS: Whether Chrome found a file of managed policies to follow. On Android (OS version Lollipop+): Whether the device has a profile owner app. On iOS: whether Chrome is managed via MDM. This check is performed once on application start-up. pastarmovj@chromium.org zmin@chromium.org Whether the machine is managed or part of an enterprise. This includes devices that are either in a domain or managed via MDM. This check is performed once at start-up on Windows. yeroshkin@chromium.org zmin@chromium.org Whether the machine is managed or part of an enterprise. This includes devices that are either in a domain or managed via MDM (strict Azure AD join check). This check is performed once at start-up on Windows. zmin@chromium.org noahrose@google.com Records the 4-state combination of whether the machine is managed or part of an enterprise (in a domain or via MDM) and whether CBCM is available or enrolled. Recorded on Windows when CBCM tokens are loaded from Registry. zmin@chromium.org noahrose@google.com Records the 4-state combination of whether the machine is managed or part of an enterprise (in a domain or via MDM with strict Azure AD join check) and whether CBCM is available or enrolled. Recorded on Windows when CBCM tokens are loaded from Registry.Recorded on Windows when CBCM tokens are loaded from Registry.Recorded on Windows when CBCM tokens are loaded from Registry. nafisabedin@google.com Records the time it takes to calculate whether there is a profile owner or device owner app on the device. Android only. pastarmovj@chromium.org zmin@chromium.org On the Mac: Whether the current user has an enterprise identity in Open Directory. This check is performed once at start-up. pastarmovj@chromium.org zmin@chromium.org On the Mac: Whether the machine is managed via MDM, with data obtained via a new method (profiles) that is only available in 10.13.4 or later. This check is performed once at start-up. ydago@chromium.org pastarmovj@chromium.org The rough Windows suite we are running on. This check is performed once at start-up on Windows. The histogram was removed in 108 and reinstated in 111. nafisabedin@google.com Records the number of system calls made when trying to determine whether there is a profile owner or device owner app on the device. Android only. wfh@chromium.org chrome-platform-security-core@google.com The Windows profile type of the current user. This is obtained by calling the GetProfileType API once at start-up on Windows. pastarmovj@chromium.org grt@chromium.org Tracks events connected with checking whether the user profile is configured on a network share. Windows only. poromov@chromium.org ayaelattar@chromium.org The number of times cleanup of local files was initiated after user session startup. Recorded at every time accumulating number of previous calls in this session.