# Assets Query Filters

This document provides details on the filters supported by each provider for each API operation. Filters can be used to restrict the results of an API operation, such as filtering by a specific field or value.

They are used in conjunction with the `filter` query parameter in the API request.

### Armis Centrix™ filters for `get_labels`

| Field | Operators | Supported Values |
|  --- | --- | --- |


### Axonius filters for `get_labels`

| Field | Operators | Supported Values |
|  --- | --- | --- |
| metadata.labels | eq, like | string |


### CrowdStrike Falcon Spotlight filters for `get_labels`

| Field | Operators | Supported Values |
|  --- | --- | --- |


### Nozomi Vantage filters for `get_labels`

| Field | Operators | Supported Values |
|  --- | --- | --- |


### Qualys VMDR filters for `get_labels`

| Field | Operators | Supported Values |
|  --- | --- | --- |


### ServiceNow CMDB filters for `get_labels`

| Field | Operators | Supported Values |
|  --- | --- | --- |


### Sevco filters for `get_labels`

| Field | Operators | Supported Values |
|  --- | --- | --- |


### Tanium Assets filters for `get_labels`

| Field | Operators | Supported Values |
|  --- | --- | --- |


### [MOCK] Armis Centrix filters for `get_labels`

| Field | Operators | Supported Values |
|  --- | --- | --- |


### [MOCK] Axonius filters for `get_labels`

| Field | Operators | Supported Values |
|  --- | --- | --- |
| metadata.labels | eq, like | string |


### [MOCK] CrowdStrike Falcon Spotlight filters for `get_labels`

| Field | Operators | Supported Values |
|  --- | --- | --- |


### [MOCK] Nozomi Vantage filters for `get_labels`

| Field | Operators | Supported Values |
|  --- | --- | --- |


### [MOCK] Qualys VMDR filters for `get_labels`

| Field | Operators | Supported Values |
|  --- | --- | --- |


### [MOCK] ServiceNow CMDB filters for `get_labels`

| Field | Operators | Supported Values |
|  --- | --- | --- |


### [MOCK] Sevco filters for `get_labels`

| Field | Operators | Supported Values |
|  --- | --- | --- |


### [MOCK] Tanium Assets filters for `get_labels`

| Field | Operators | Supported Values |
|  --- | --- | --- |


### Armis Centrix™ filters for `query_devices`

| Field | Operators | Supported Values |
|  --- | --- | --- |
| device.hw_info.bios_manufacturer | eq, ne, in, not_in | string |
| device.ip | eq, ne, in, not_in | string |
| device.location.desc | eq, ne, in, not_in | string |
| device.mac | eq, ne, in, not_in | string |
| device.name | eq, ne, in, not_in, like, not_like | string |
| device.os.version | eq, ne, in, not_in | string |
| device.risk_score | gt, gte, lt, lte | number |
| device.type | eq, ne, in, not_in | string |
| device.uid | eq, ne, in, not_in | string |


### Axonius filters for `query_devices`

| Field | Operators | Supported Values |
|  --- | --- | --- |
| device.hostname | eq, ne, in | string |
| device.ip | eq, ne | string |
| device.mac | eq, ne, in | string |
| device.os.name | eq, ne, in | string |
| device.os.type | eq, ne, in | string |
| device.uid | eq, ne | string |
| metadata.labels | eq | string |


### CrowdStrike Falcon Spotlight filters for `query_devices`

| Field | Operators | Supported Values |
|  --- | --- | --- |
| device.hostname | eq | string |
| device.ip | eq | string |
| device.last_seen_time | gte | datetime |
| device.mac | eq | string |


### Nozomi Vantage filters for `query_devices`

| Field | Operators | Supported Values |
|  --- | --- | --- |
| device.first_seen_time | gt, gte, lt, lte | number |
| device.hw_info.serial_number | eq, ne, in, not_in, like, not_like | string |
| device.ip | eq, ne, in, not_in | string |
| device.ip_addresses | eq, ne, in, not_in | string |
| device.last_seen_time | gt, gte, lt, lte | number |
| device.mac | eq, ne, in, not_in | string |
| device.mac_addresses | eq, ne, in, not_in | string |
| device.name | eq, ne, in, not_in, like, not_like | string |
| device.network_interfaces.name | eq, ne, in, not_in | string |
| device.risk_level_id | eq, ne, in, not_in | 0, 1, 2, 3, 4 |
| device.risk_score | gt, gte, lt, lte | number |
| device.type | eq, ne, in, not_in, like, not_like | string |
| device.type_id | eq, ne, in, not_in | 2, 4, 5, 10, 89, 90, 96 |
| device.uid | eq, ne, in, not_in, like, not_like | string |
| device.vendor.name | eq, ne, in, not_in, like, not_like | string |
| time | gt, gte, lt, lte | datetime |


### Qualys VMDR filters for `query_devices`

| Field | Operators | Supported Values |
|  --- | --- | --- |
| device.hostname | eq | string |
| device.ip | eq | string |
| device.last_seen_time | gte | datetime |
| device.mac | eq | string |


### ServiceNow CMDB filters for `query_devices`

| Field | Operators | Supported Values |
|  --- | --- | --- |
| device.first_seen_time | gt, gte, lt, lte | number |
| device.hostname | eq, ne, in, not_in, like, not_like | string |
| device.hw_info.serial_number | eq, ne, in, not_in, like, not_like | string |
| device.ip | eq, ne, in, not_in, like, not_like | string |
| device.last_seen_time | gt, gte, lt, lte | number |
| device.mac | eq, ne, in, not_in, like, not_like | string |
| device.modified_time | gt, gte, lt, lte | number |
| device.name | eq, ne, in, not_in, like, not_like | string |
| device.uid | eq, ne, in, not_in, like, not_like | string |
| time | gt, gte, lt, lte | datetime |


### Sevco filters for `query_devices`

| Field | Operators | Supported Values |
|  --- | --- | --- |
| device.hostname | eq, ne, in, not_in, like, not_like | string |
| device.ip | eq, ne, gt, gte, lt, lte | string |
| device.last_seen_time | eq, ne, gt, gte, lt, lte | string |
| device.mac | eq, ne | string |
| device.os.name | eq, ne, in, not_in, like, not_like | string |
| device.os.type_id | eq, ne | string |
| device.uid | eq | string |


### Tanium Assets filters for `query_devices`

| Field | Operators | Supported Values |
|  --- | --- | --- |
| device.hostname | eq | string |
| device.ip | eq | string |
| device.last_seen_time | gte | datetime |
| device.mac | eq | string |


### [MOCK] Armis Centrix filters for `query_devices`

| Field | Operators | Supported Values |
|  --- | --- | --- |
| device.hw_info.bios_manufacturer | eq, ne, in, not_in | string |
| device.ip | eq, ne, in, not_in | string |
| device.location.desc | eq, ne, in, not_in | string |
| device.mac | eq, ne, in, not_in | string |
| device.name | eq, ne, in, not_in, like, not_like | string |
| device.os.version | eq, ne, in, not_in | string |
| device.risk_score | gt, gte, lt, lte | number |
| device.type | eq, ne, in, not_in | string |
| device.uid | eq, ne, in, not_in | string |


### [MOCK] Axonius filters for `query_devices`

| Field | Operators | Supported Values |
|  --- | --- | --- |
| device.hostname | eq, ne, in | string |
| device.ip | eq, ne | string |
| device.mac | eq, ne, in | string |
| device.os.name | eq, ne, in | string |
| device.os.type | eq, ne, in | string |
| device.uid | eq, ne | string |
| metadata.labels | eq | string |


### [MOCK] CrowdStrike Falcon Spotlight filters for `query_devices`

| Field | Operators | Supported Values |
|  --- | --- | --- |
| device.hostname | eq | string |
| device.ip | eq | string |
| device.last_seen_time | gte | datetime |
| device.mac | eq | string |


### [MOCK] Nozomi Vantage filters for `query_devices`

| Field | Operators | Supported Values |
|  --- | --- | --- |
| device.first_seen_time | gt, gte, lt, lte | number |
| device.hw_info.serial_number | eq, ne, in, not_in, like, not_like | string |
| device.ip | eq, ne, in, not_in | string |
| device.ip_addresses | eq, ne, in, not_in | string |
| device.last_seen_time | gt, gte, lt, lte | number |
| device.mac | eq, ne, in, not_in | string |
| device.mac_addresses | eq, ne, in, not_in | string |
| device.name | eq, ne, in, not_in, like, not_like | string |
| device.network_interfaces.name | eq, ne, in, not_in | string |
| device.risk_level_id | eq, ne, in, not_in | 0, 1, 2, 3, 4 |
| device.risk_score | gt, gte, lt, lte | number |
| device.type | eq, ne, in, not_in, like, not_like | string |
| device.type_id | eq, ne, in, not_in | 2, 4, 5, 10, 89, 90, 96 |
| device.uid | eq, ne, in, not_in, like, not_like | string |
| device.vendor.name | eq, ne, in, not_in, like, not_like | string |
| time | gt, gte, lt, lte | datetime |


### [MOCK] Qualys VMDR filters for `query_devices`

| Field | Operators | Supported Values |
|  --- | --- | --- |
| device.hostname | eq | string |
| device.ip | eq | string |
| device.last_seen_time | gte | datetime |
| device.mac | eq | string |


### [MOCK] ServiceNow CMDB filters for `query_devices`

| Field | Operators | Supported Values |
|  --- | --- | --- |
| device.first_seen_time | gt, gte, lt, lte | number |
| device.hostname | eq, ne, in, not_in, like, not_like | string |
| device.hw_info.serial_number | eq, ne, in, not_in, like, not_like | string |
| device.ip | eq, ne, in, not_in, like, not_like | string |
| device.last_seen_time | gt, gte, lt, lte | number |
| device.mac | eq, ne, in, not_in, like, not_like | string |
| device.modified_time | gt, gte, lt, lte | number |
| device.name | eq, ne, in, not_in, like, not_like | string |
| device.uid | eq, ne, in, not_in, like, not_like | string |
| time | gt, gte, lt, lte | datetime |


### [MOCK] Sevco filters for `query_devices`

| Field | Operators | Supported Values |
|  --- | --- | --- |
| device.hostname | eq, ne, in, not_in, like, not_like | string |
| device.ip | eq, ne, gt, gte, lt, lte | string |
| device.last_seen_time | eq, ne, gt, gte, lt, lte | string |
| device.mac | eq, ne | string |
| device.os.name | eq, ne, in, not_in, like, not_like | string |
| device.os.type_id | eq, ne | string |
| device.uid | eq | string |


### [MOCK] Tanium Assets filters for `query_devices`

| Field | Operators | Supported Values |
|  --- | --- | --- |
| device.hostname | eq | string |
| device.ip | eq | string |
| device.last_seen_time | gte | datetime |
| device.mac | eq | string |