Assets Query Filters
Copy for LLM
Copy page as Markdown for LLMs
View as Markdown
Open this page as Markdown
Open in ChatGPT
Get insights from ChatGPT
Open in Claude
Get insights from Claude

This document provides details on the filters supported by each provider for each API operation. Filters can be used to restrict the results of an API operation, such as filtering by a specific field or value. If a provider or operation does not support filters, it will not be listed here.

They are used in conjunction with the filter query parameter in the API request.

Axonius filters for `get_labels`

Field	Operators	Supported Values
metadata.labels	eq, like	string

[MOCK] Axonius filters for `get_labels`

Field	Operators	Supported Values
metadata.labels	eq, like	string

Armis Centrix™ filters for `query_devices`

Field	Operators	Supported Values
device.hw_info.bios_manufacturer	eq, ne, in, not_in	string
device.ip	eq, ne, in, not_in	string
device.location.desc	eq, ne, in, not_in	string
device.mac	eq, ne, in, not_in	string
device.name	eq, ne, in, not_in, like, not_like	string
device.os.version	eq, ne, in, not_in	string
device.risk_score	gt, gte, lt, lte	number
device.type	eq, ne, in, not_in	string
device.uid	eq, ne, in, not_in	string

Axonius filters for `query_devices`

Field	Operators	Supported Values
device.hostname	eq, ne, in	string
device.ip	eq, ne	string
device.mac	eq, ne, in	string
device.os.name	eq, ne, in	string
device.os.type	eq, ne, in	string
device.uid	eq, ne	string
metadata.labels	eq	string

Claroty xDome filters for `query_devices`

Field	Operators	Supported Values
device.hostname	in, not_in, like, not_like	string
device.ip	in, not_in	string
device.last_seen_time	gt, lt	datetime
device.mac	in, not_in	string
device.os.name	in, not_in	string
device.os.type	in, not_in	string
device.uid	in, not_in	string
metadata.labels	in	string

CrowdStrike Falcon Spotlight filters for `query_devices`

Field	Operators	Supported Values
device.hostname	eq	string
device.ip	eq	string
device.last_seen_time	gte	datetime
device.mac	eq	string

Ivanti Neurons filters for `query_devices`

Field	Operators	Supported Values
device.hostname	eq, ne, like, not_like	string
device.ip	eq, ne, like, not_like	string
device.last_seen_time	eq, gt, gte, lt, lte	string
device.mac	eq, ne, like, not_like	string
device.os.name	eq, ne, like, not_like	string
device.os.type	eq, ne, like, not_like	string
device.uid	eq, ne, like, not_like	string

Nozomi Vantage filters for `query_devices`

Field	Operators	Supported Values
device.first_seen_time	gt, gte, lt, lte	number
device.hw_info.serial_number	eq, ne, in, not_in, like, not_like	string
device.ip	eq, ne, in, not_in	string
device.ip_addresses	eq, ne, in, not_in	string
device.last_seen_time	gt, gte, lt, lte	number
device.mac	eq, ne, in, not_in	string
device.mac_addresses	eq, ne, in, not_in	string
device.name	eq, ne, in, not_in, like, not_like	string
device.network_interfaces.name	eq, ne, in, not_in	string
device.risk_level_id	eq, ne, in, not_in	0, 1, 2, 3, 4
device.risk_score	gt, gte, lt, lte	number
device.type	eq, ne, in, not_in, like, not_like	string
device.type_id	eq, ne, in, not_in	2, 4, 5, 10, 89, 90, 96
device.uid	eq, ne, in, not_in, like, not_like	string
device.vendor.name	eq, ne, in, not_in, like, not_like	string
time	gt, gte, lt, lte	datetime

Qualys VMDR filters for `query_devices`

Field	Operators	Supported Values
device.hostname	eq	string
device.ip	eq	string
device.last_seen_time	gte	datetime
device.mac	eq	string

ServiceNow CMDB filters for `query_devices`

Field	Operators	Supported Values
device.first_seen_time	gt, gte, lt, lte	number
device.hostname	eq, ne, in, not_in, like, not_like	string
device.hw_info.serial_number	eq, ne, in, not_in, like, not_like	string
device.ip	eq, ne, in, not_in, like, not_like	string
device.last_seen_time	gt, gte, lt, lte	number
device.mac	eq, ne, in, not_in, like, not_like	string
device.modified_time	gt, gte, lt, lte	number
device.name	eq, ne, in, not_in, like, not_like	string
device.uid	eq, ne, in, not_in, like, not_like	string
time	gt, gte, lt, lte	datetime

Sevco filters for `query_devices`

Field	Operators	Supported Values
device.hostname	eq, ne, in, not_in, like, not_like	string
device.ip	eq, ne, gt, gte, lt, lte	string
device.last_seen_time	eq, ne, gt, gte, lt, lte	string
device.mac	eq, ne	string
device.os.name	eq, ne, in, not_in, like, not_like	string
device.os.type_id	eq, ne	string
device.uid	eq	string

Tanium Assets filters for `query_devices`

Field	Operators	Supported Values
device.hostname	eq	string
device.ip	eq	string
device.last_seen_time	gte	datetime
device.mac	eq	string

[MOCK] Armis Centrix filters for `query_devices`

Field	Operators	Supported Values
device.hw_info.bios_manufacturer	eq, ne, in, not_in	string
device.ip	eq, ne, in, not_in	string
device.location.desc	eq, ne, in, not_in	string
device.mac	eq, ne, in, not_in	string
device.name	eq, ne, in, not_in, like, not_like	string
device.os.version	eq, ne, in, not_in	string
device.risk_score	gt, gte, lt, lte	number
device.type	eq, ne, in, not_in	string
device.uid	eq, ne, in, not_in	string

[MOCK] Axonius filters for `query_devices`

Field	Operators	Supported Values
device.hostname	eq, ne, in	string
device.ip	eq, ne	string
device.mac	eq, ne, in	string
device.os.name	eq, ne, in	string
device.os.type	eq, ne, in	string
device.uid	eq, ne	string
metadata.labels	eq	string

[MOCK] CrowdStrike Falcon Spotlight filters for `query_devices`

Field	Operators	Supported Values
device.hostname	eq	string
device.ip	eq	string
device.last_seen_time	gte	datetime
device.mac	eq	string

[MOCK] Nozomi Vantage filters for `query_devices`

Field	Operators	Supported Values
device.first_seen_time	gt, gte, lt, lte	number
device.hw_info.serial_number	eq, ne, in, not_in, like, not_like	string
device.ip	eq, ne, in, not_in	string
device.ip_addresses	eq, ne, in, not_in	string
device.last_seen_time	gt, gte, lt, lte	number
device.mac	eq, ne, in, not_in	string
device.mac_addresses	eq, ne, in, not_in	string
device.name	eq, ne, in, not_in, like, not_like	string
device.network_interfaces.name	eq, ne, in, not_in	string
device.risk_level_id	eq, ne, in, not_in	0, 1, 2, 3, 4
device.risk_score	gt, gte, lt, lte	number
device.type	eq, ne, in, not_in, like, not_like	string
device.type_id	eq, ne, in, not_in	2, 4, 5, 10, 89, 90, 96
device.uid	eq, ne, in, not_in, like, not_like	string
device.vendor.name	eq, ne, in, not_in, like, not_like	string
time	gt, gte, lt, lte	datetime

[MOCK] Qualys VMDR filters for `query_devices`

Field	Operators	Supported Values
device.hostname	eq	string
device.ip	eq	string
device.last_seen_time	gte	datetime
device.mac	eq	string

[MOCK] ServiceNow CMDB filters for `query_devices`

Field	Operators	Supported Values
device.first_seen_time	gt, gte, lt, lte	number
device.hostname	eq, ne, in, not_in, like, not_like	string
device.hw_info.serial_number	eq, ne, in, not_in, like, not_like	string
device.ip	eq, ne, in, not_in, like, not_like	string
device.last_seen_time	gt, gte, lt, lte	number
device.mac	eq, ne, in, not_in, like, not_like	string
device.modified_time	gt, gte, lt, lte	number
device.name	eq, ne, in, not_in, like, not_like	string
device.uid	eq, ne, in, not_in, like, not_like	string
time	gt, gte, lt, lte	datetime

[MOCK] Sevco filters for `query_devices`

Field	Operators	Supported Values
device.hostname	eq, ne, in, not_in, like, not_like	string
device.ip	eq, ne, gt, gte, lt, lte	string
device.last_seen_time	eq, ne, gt, gte, lt, lte	string
device.mac	eq, ne	string
device.os.name	eq, ne, in, not_in, like, not_like	string
device.os.type_id	eq, ne	string
device.uid	eq	string

[MOCK] Tanium Assets filters for `query_devices`

Field	Operators	Supported Values
device.hostname	eq	string
device.ip	eq	string
device.last_seen_time	gte	datetime
device.mac	eq	string

Assets Query FiltersCopyCopy for LLMCopy page as Markdown for LLMsView as MarkdownOpen this page as MarkdownOpen in ChatGPTGet insights from ChatGPTOpen in ClaudeGet insights from Claude

Axonius filters for get_labels

[MOCK] Axonius filters for get_labels

Armis Centrix™ filters for query_devices

Axonius filters for query_devices

Claroty xDome filters for query_devices

CrowdStrike Falcon Spotlight filters for query_devices

Ivanti Neurons filters for query_devices

Nozomi Vantage filters for query_devices

Qualys VMDR filters for query_devices

ServiceNow CMDB filters for query_devices

Sevco filters for query_devices

Tanium Assets filters for query_devices

[MOCK] Armis Centrix filters for query_devices

[MOCK] Axonius filters for query_devices

[MOCK] CrowdStrike Falcon Spotlight filters for query_devices

[MOCK] Nozomi Vantage filters for query_devices

[MOCK] Qualys VMDR filters for query_devices

[MOCK] ServiceNow CMDB filters for query_devices

[MOCK] Sevco filters for query_devices

[MOCK] Tanium Assets filters for query_devices

Was this helpful?