Assets Query Filters

This document provides details on the filters supported by each provider for each API operation. Filters can be used to restrict the results of an API operation, such as filtering by a specific field or value.

They are used in conjunction with the filter query parameter in the API request.

Armis Centrix filters for query_devices

FieldOperatorsSupported Values
device.hw_info.bios_manufacturereq, ne, in, not_instring
device.ipeq, ne, in, not_instring
device.location.desceq, ne, in, not_instring
device.maceq, ne, in, not_instring
device.nameeq, ne, in, not_in, like, not_likename
device.os.versioneq, ne, in, not_instring
device.risk_scoregt, gte, lt, lteinteger
device.typeeq, ne, in, not_instring
device.uideq, ne, in, not_instring

Nozomi Vantage filters for query_devices

FieldOperatorsSupported Values
device.first_seen_timegt, gte, lt, lteinteger
device.hw_info.serial_numbereq, ne, in, not_in, like, not_likestring
device.ipeq, ne, in, not_instring
device.ip_addresseseq, ne, in, not_instring
device.last_seen_timegt, gte, lt, lteinteger
device.maceq, ne, in, not_instring
device.mac_addresseseq, ne, in, not_instring
device.nameeq, ne, in, not_in, like, not_likestringProcessMap("name")
device.network_interfaces.nameeq, ne, in, not_instring
device.risk_level_ideq, ne, in, not_in0, 1, 2, 3, 4
device.risk_scoregt, gte, lt, lteinteger
device.typeeq, ne, in, not_in, like, not_likestring
device.type_ideq, ne, in, not_in2, 4, 5, 10, 89, 90, 96
device.uideq, ne, in, not_in, like, not_likestring
device.vendor.nameeq, ne, in, not_in, like, not_likestring
timegt, gte, lt, lteinteger

ServiceNow CMDB filters for query_devices

FieldOperatorsSupported Values

[MOCK] ServiceNow CMDB filters for query_devices

FieldOperatorsSupported Values