Assets Query Filters
Copy for LLM
Copy page as Markdown for LLMs
View as Markdown
Open this page as Markdown
Open in ChatGPT
Get insights from ChatGPT
Open in Claude
Get insights from Claude

This document provides details on the filters supported by each provider for each API operation. Filters can be used to restrict the results of an API operation, such as filtering by a specific field or value.

They are used in conjunction with the filter query parameter in the API request.

Armis Centrix™ filters for `get_labels`

Field	Operators	Supported Values

Axonius filters for `get_labels`

Field	Operators	Supported Values
metadata.labels	eq, like	string

CrowdStrike Falcon Spotlight filters for `get_labels`

Field	Operators	Supported Values

Nozomi Vantage filters for `get_labels`

Field	Operators	Supported Values

Qualys VMDR filters for `get_labels`

Field	Operators	Supported Values

ServiceNow CMDB filters for `get_labels`

Field	Operators	Supported Values

Sevco filters for `get_labels`

Field	Operators	Supported Values

Tanium Assets filters for `get_labels`

Field	Operators	Supported Values

[MOCK] Armis Centrix filters for `get_labels`

Field	Operators	Supported Values

[MOCK] Axonius filters for `get_labels`

Field	Operators	Supported Values
metadata.labels	eq, like	string

[MOCK] CrowdStrike Falcon Spotlight filters for `get_labels`

Field	Operators	Supported Values

[MOCK] Nozomi Vantage filters for `get_labels`

Field	Operators	Supported Values

[MOCK] Qualys VMDR filters for `get_labels`

Field	Operators	Supported Values

[MOCK] ServiceNow CMDB filters for `get_labels`

Field	Operators	Supported Values

[MOCK] Sevco filters for `get_labels`

Field	Operators	Supported Values

[MOCK] Tanium Assets filters for `get_labels`

Field	Operators	Supported Values

Armis Centrix™ filters for `query_devices`

Field	Operators	Supported Values
device.hw_info.bios_manufacturer	eq, ne, in, not_in	string
device.ip	eq, ne, in, not_in	string
device.location.desc	eq, ne, in, not_in	string
device.mac	eq, ne, in, not_in	string
device.name	eq, ne, in, not_in, like, not_like	string
device.os.version	eq, ne, in, not_in	string
device.risk_score	gt, gte, lt, lte	number
device.type	eq, ne, in, not_in	string
device.uid	eq, ne, in, not_in	string

Axonius filters for `query_devices`

Field	Operators	Supported Values
device.hostname	eq, ne, in	string
device.ip	eq, ne	string
device.mac	eq, ne, in	string
device.os.name	eq, ne, in	string
device.os.type	eq, ne, in	string
device.uid	eq, ne	string
metadata.labels	eq	string

CrowdStrike Falcon Spotlight filters for `query_devices`

Field	Operators	Supported Values
device.hostname	eq	string
device.ip	eq	string
device.last_seen_time	gte	datetime
device.mac	eq	string

Nozomi Vantage filters for `query_devices`

Field	Operators	Supported Values
device.first_seen_time	gt, gte, lt, lte	number
device.hw_info.serial_number	eq, ne, in, not_in, like, not_like	string
device.ip	eq, ne, in, not_in	string
device.ip_addresses	eq, ne, in, not_in	string
device.last_seen_time	gt, gte, lt, lte	number
device.mac	eq, ne, in, not_in	string
device.mac_addresses	eq, ne, in, not_in	string
device.name	eq, ne, in, not_in, like, not_like	string
device.network_interfaces.name	eq, ne, in, not_in	string
device.risk_level_id	eq, ne, in, not_in	0, 1, 2, 3, 4
device.risk_score	gt, gte, lt, lte	number
device.type	eq, ne, in, not_in, like, not_like	string
device.type_id	eq, ne, in, not_in	2, 4, 5, 10, 89, 90, 96
device.uid	eq, ne, in, not_in, like, not_like	string
device.vendor.name	eq, ne, in, not_in, like, not_like	string
time	gt, gte, lt, lte	datetime

Qualys VMDR filters for `query_devices`

Field	Operators	Supported Values
device.hostname	eq	string
device.ip	eq	string
device.last_seen_time	gte	datetime
device.mac	eq	string

ServiceNow CMDB filters for `query_devices`

Field	Operators	Supported Values
device.first_seen_time	gt, gte, lt, lte	number
device.hostname	eq, ne, in, not_in, like, not_like	string
device.hw_info.serial_number	eq, ne, in, not_in, like, not_like	string
device.ip	eq, ne, in, not_in, like, not_like	string
device.last_seen_time	gt, gte, lt, lte	number
device.mac	eq, ne, in, not_in, like, not_like	string
device.modified_time	gt, gte, lt, lte	number
device.name	eq, ne, in, not_in, like, not_like	string
device.uid	eq, ne, in, not_in, like, not_like	string
time	gt, gte, lt, lte	datetime

Sevco filters for `query_devices`

Field	Operators	Supported Values
device.hostname	eq, ne, in, not_in, like, not_like	string
device.ip	eq, ne, gt, gte, lt, lte	string
device.last_seen_time	eq, ne, gt, gte, lt, lte	string
device.mac	eq, ne	string
device.os.name	eq, ne, in, not_in, like, not_like	string
device.os.type_id	eq, ne	string
device.uid	eq	string

Tanium Assets filters for `query_devices`

Field	Operators	Supported Values
device.hostname	eq	string
device.ip	eq	string
device.last_seen_time	gte	datetime
device.mac	eq	string

[MOCK] Armis Centrix filters for `query_devices`

Field	Operators	Supported Values
device.hw_info.bios_manufacturer	eq, ne, in, not_in	string
device.ip	eq, ne, in, not_in	string
device.location.desc	eq, ne, in, not_in	string
device.mac	eq, ne, in, not_in	string
device.name	eq, ne, in, not_in, like, not_like	string
device.os.version	eq, ne, in, not_in	string
device.risk_score	gt, gte, lt, lte	number
device.type	eq, ne, in, not_in	string
device.uid	eq, ne, in, not_in	string

[MOCK] Axonius filters for `query_devices`

Field	Operators	Supported Values
device.hostname	eq, ne, in	string
device.ip	eq, ne	string
device.mac	eq, ne, in	string
device.os.name	eq, ne, in	string
device.os.type	eq, ne, in	string
device.uid	eq, ne	string
metadata.labels	eq	string

[MOCK] CrowdStrike Falcon Spotlight filters for `query_devices`

Field	Operators	Supported Values
device.hostname	eq	string
device.ip	eq	string
device.last_seen_time	gte	datetime
device.mac	eq	string

[MOCK] Nozomi Vantage filters for `query_devices`

Field	Operators	Supported Values
device.first_seen_time	gt, gte, lt, lte	number
device.hw_info.serial_number	eq, ne, in, not_in, like, not_like	string
device.ip	eq, ne, in, not_in	string
device.ip_addresses	eq, ne, in, not_in	string
device.last_seen_time	gt, gte, lt, lte	number
device.mac	eq, ne, in, not_in	string
device.mac_addresses	eq, ne, in, not_in	string
device.name	eq, ne, in, not_in, like, not_like	string
device.network_interfaces.name	eq, ne, in, not_in	string
device.risk_level_id	eq, ne, in, not_in	0, 1, 2, 3, 4
device.risk_score	gt, gte, lt, lte	number
device.type	eq, ne, in, not_in, like, not_like	string
device.type_id	eq, ne, in, not_in	2, 4, 5, 10, 89, 90, 96
device.uid	eq, ne, in, not_in, like, not_like	string
device.vendor.name	eq, ne, in, not_in, like, not_like	string
time	gt, gte, lt, lte	datetime

[MOCK] Qualys VMDR filters for `query_devices`

Field	Operators	Supported Values
device.hostname	eq	string
device.ip	eq	string
device.last_seen_time	gte	datetime
device.mac	eq	string

[MOCK] ServiceNow CMDB filters for `query_devices`

Field	Operators	Supported Values
device.first_seen_time	gt, gte, lt, lte	number
device.hostname	eq, ne, in, not_in, like, not_like	string
device.hw_info.serial_number	eq, ne, in, not_in, like, not_like	string
device.ip	eq, ne, in, not_in, like, not_like	string
device.last_seen_time	gt, gte, lt, lte	number
device.mac	eq, ne, in, not_in, like, not_like	string
device.modified_time	gt, gte, lt, lte	number
device.name	eq, ne, in, not_in, like, not_like	string
device.uid	eq, ne, in, not_in, like, not_like	string
time	gt, gte, lt, lte	datetime

[MOCK] Sevco filters for `query_devices`

Field	Operators	Supported Values
device.hostname	eq, ne, in, not_in, like, not_like	string
device.ip	eq, ne, gt, gte, lt, lte	string
device.last_seen_time	eq, ne, gt, gte, lt, lte	string
device.mac	eq, ne	string
device.os.name	eq, ne, in, not_in, like, not_like	string
device.os.type_id	eq, ne	string
device.uid	eq	string

[MOCK] Tanium Assets filters for `query_devices`

Field	Operators	Supported Values
device.hostname	eq	string
device.ip	eq	string
device.last_seen_time	gte	datetime
device.mac	eq	string

Assets Query FiltersCopyCopy for LLMCopy page as Markdown for LLMsView as MarkdownOpen this page as MarkdownOpen in ChatGPTGet insights from ChatGPTOpen in ClaudeGet insights from Claude

Armis Centrix™ filters for get_labels

Axonius filters for get_labels

CrowdStrike Falcon Spotlight filters for get_labels

Nozomi Vantage filters for get_labels

Qualys VMDR filters for get_labels

ServiceNow CMDB filters for get_labels

Sevco filters for get_labels

Tanium Assets filters for get_labels

[MOCK] Armis Centrix filters for get_labels

[MOCK] Axonius filters for get_labels

[MOCK] CrowdStrike Falcon Spotlight filters for get_labels

[MOCK] Nozomi Vantage filters for get_labels

[MOCK] Qualys VMDR filters for get_labels

[MOCK] ServiceNow CMDB filters for get_labels

[MOCK] Sevco filters for get_labels

[MOCK] Tanium Assets filters for get_labels

Armis Centrix™ filters for query_devices

Axonius filters for query_devices

CrowdStrike Falcon Spotlight filters for query_devices

Nozomi Vantage filters for query_devices

Qualys VMDR filters for query_devices

ServiceNow CMDB filters for query_devices

Sevco filters for query_devices

Tanium Assets filters for query_devices

[MOCK] Armis Centrix filters for query_devices

[MOCK] Axonius filters for query_devices

[MOCK] CrowdStrike Falcon Spotlight filters for query_devices

[MOCK] Nozomi Vantage filters for query_devices

[MOCK] Qualys VMDR filters for query_devices

[MOCK] ServiceNow CMDB filters for query_devices

[MOCK] Sevco filters for query_devices

[MOCK] Tanium Assets filters for query_devices

Was this helpful?