# Assets Supported Fields

This document shows the fields supported by each provider and operation.

- [query_devices](#query_devices)
- [query_software](#query_software)


## query_devices

| Field | Axonius | CrowdStrike Falcon Spotlight | Iru | Ivanti Neurons | Microsoft Defender for Endpoint | Nozomi Vantage | Qualys VMDR | ServiceNow CMDB | Tanium Assets | Tenable Cloud | [MOCK] Ivanti Neurons | Type |
|  --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
| activity_id | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
| activity_name | ✅ | ❌ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
| category_name | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
| category_uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
| class_name | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
| class_uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
| cloud.account.type | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | string |
| cloud.account.type_id | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | number |
| cloud.account.uid | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | string |
| cloud.project_uid | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| cloud.provider | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | string |
| cloud.region | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
| cloud.zone | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
| count | ❌ | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ❌ | ✅ | ✅ | ✅ | number |
| device.created_time | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | timestamp |
| device.created_time_dt | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
| device.desc | ❌ | ✅ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
| device.domain | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | string |
| device.first_seen_time | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | timestamp |
| device.first_seen_time_dt | ❌ | ✅ | ✅ | ❌ | ✅ | ❌ | ✅ | ✅ | ❌ | ❌ | ❌ | string |
| device.groups[].desc | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
| device.groups[].name | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ | string |
| device.groups[].type | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ | string |
| device.groups[].uid | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ | string |
| device.hostname | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
| device.hw_info.bios_manufacturer | ✅ | ✅ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
| device.hw_info.bios_uid | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
| device.hw_info.bios_ver | ❌ | ✅ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
| device.hw_info.chassis | ❌ | ✅ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
| device.hw_info.cpu_cores | ✅ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ✅ | number |
| device.hw_info.cpu_count | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | number |
| device.hw_info.cpu_speed | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | number |
| device.hw_info.cpu_type | ✅ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | ✅ | ❌ | ✅ | string |
| device.hw_info.ram_size | ✅ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | number |
| device.hw_info.serial_number | ❌ | ✅ | ✅ | ✅ | ❌ | ✅ | ❌ | ✅ | ✅ | ❌ | ✅ | string |
| device.hw_info.uuid | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
| device.hw_info.vendor_name | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
| device.image.name | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
| device.image.tag | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
| device.image.uid | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | string |
| device.instance_uid | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ | ✅ | ❌ | ✅ | ✅ | ✅ | string |
| device.ip | ✅ | ✅ | ❌ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
| device.ip_addresses[] | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | ✅ | ❌ | string |
| device.is_managed | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | boolean |
| device.last_seen_time | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | timestamp |
| device.last_seen_time_dt | ❌ | ✅ | ✅ | ❌ | ✅ | ❌ | ✅ | ✅ | ❌ | ❌ | ❌ | string |
| device.mac | ✅ | ✅ | ❌ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | ✅ | ✅ | string |
| device.mac_addresses[] | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | ❌ | string |
| device.modified_time | ❌ | ✅ | ❌ | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | timestamp |
| device.modified_time_dt | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| device.name | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ❌ | ❌ | ✅ | string |
| device.netbios_names[] | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
| device.network_interfaces[].hostname | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | string |
| device.network_interfaces[].ip | ❌ | ❌ | ❌ | ❌ | ✅ | ✅ | ✅ | ❌ | ❌ | ✅ | ❌ | string |
| device.network_interfaces[].ip_addresses[] | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
| device.network_interfaces[].mac | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
| device.network_interfaces[].mac_addresses[] | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
| device.network_interfaces[].name | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
| device.network_interfaces[].type | ❌ | ❌ | ❌ | ❌ | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| device.network_interfaces[].type_id | ❌ | ❌ | ❌ | ❌ | ✅ | ✅ | ✅ | ❌ | ❌ | ✅ | ❌ | number |
| device.network_status | ❌ | ✅ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ✅ | string |
| device.network_status_id | ❌ | ✅ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ✅ | number |
| device.org.name | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| device.org.uid | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| device.os.build | ❌ | ✅ | ❌ | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
| device.os.name | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ | ✅ | ✅ | ✅ | string |
| device.os.type | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ | ✅ | ❌ | ✅ | string |
| device.os.type_id | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ | ✅ | ✅ | ✅ | number |
| device.os.version | ❌ | ✅ | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ✅ | mixed |
| device.region | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | mixed |
| device.risk_level | ❌ | ❌ | ❌ | ❌ | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| device.risk_level_id | ❌ | ❌ | ❌ | ❌ | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | number |
| device.risk_score | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ | number |
| device.subnet | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
| device.subnet_uid | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | string |
| device.sw_info[].cpe_name | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
| device.sw_info[].name | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ✅ | ❌ | string |
| device.sw_info[].vendor_name | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ✅ | ❌ | string |
| device.sw_info[].version | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ✅ | ❌ | string |
| device.type | ❌ | ✅ | ❌ | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | string |
| device.type_id | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
| device.uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
| device.uid_alt | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| device.vendor.name | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| device.vendor_name | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
| device.vlan_uid | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| device.vpc_uid | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | string |
| device.zone | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | string |
| duration | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | number |
| enrichments[].data | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| enrichments[].name | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| enrichments[].type | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| enrichments[].value | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| message | ✅ | ✅ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
| metadata.labels[] | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | ✅ | ✅ | ❌ | ✅ | ❌ | string |
| metadata.log_provider | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| metadata.loggers[].agent_id | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
| metadata.loggers[].logged_time | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | timestamp |
| metadata.loggers[].name | ❌ | ✅ | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | ✅ | string |
| metadata.loggers[].product.name | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | string |
| metadata.loggers[].product.vendor_name | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | string |
| metadata.loggers[].version | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| metadata.product.name | ✅ | ❌ | ✅ | ❌ | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ❌ | string |
| metadata.product.uid | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
| metadata.product.vendor_name | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
| metadata.product.version | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| metadata.profiles[] | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| metadata.tenant_uid | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| metadata.version | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
| network_interfaces[].mac | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string |
| network_interfaces[].name | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string |
| network_interfaces[].type | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string |
| network_interfaces[].uid | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string |
| observables[].name | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | string |
| observables[].type | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | string |
| observables[].type_id | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | number |
| observables[].value | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | string |
| osint[].type | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| osint[].type_id | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | number |
| osint[].uid | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| osint[].value | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| osint[].vendor_name | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| osint[].vulnerabilities[].cve.desc | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| osint[].vulnerabilities[].cve.product.name | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| osint[].vulnerabilities[].cve.product.vendor_name | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| osint[].vulnerabilities[].cve.title | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| osint[].vulnerabilities[].cve.uid | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| osint[].vulnerabilities[].due_date | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| osint[].vulnerabilities[].is_ransomware | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | boolean |
| osint[].vulnerabilities[].remediation.desc | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| osint[].vulnerabilities[].remediation.references[] | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| severity | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
| severity_id | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
| status | ❌ | ✅ | ❌ | ✅ | ✅ | ❌ | ✅ | ❌ | ❌ | ❌ | ✅ | string |
| status_code | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| status_id | ❌ | ✅ | ❌ | ✅ | ✅ | ❌ | ✅ | ❌ | ✅ | ✅ | ✅ | number |
| time | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
| time_dt | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
| type_name | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
| type_uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |


## query_software

| Field | Axonius | CrowdStrike Falcon Spotlight | Ivanti Neurons | Tanium Assets | Tenable Cloud | [MOCK] Axonius | [MOCK] Ivanti Neurons | Type |
|  --- | --- | --- | --- | --- | --- | --- | --- | --- |
| _asset_uid | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string |
| activity_id | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
| activity_name | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
| category_name | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
| category_uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
| class_name | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
| class_uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
| device.first_seen_time | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | timestamp |
| device.hostname | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | string |
| device.hw_info.serial_number | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
| device.instance_uid | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
| device.ip | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | string |
| device.ip_addresses[] | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
| device.last_seen_time | ✅ | ❌ | ❌ | ✅ | ❌ | ✅ | ❌ | timestamp |
| device.mac | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | string |
| device.mac_addresses[] | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
| device.name | ❌ | ✅ | ✅ | ❌ | ❌ | ❌ | ✅ | string |
| device.os.build | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ✅ | string |
| device.os.name | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | string |
| device.os.type | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | string |
| device.os.type_id | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | number |
| device.os.version | ❌ | ✅ | ✅ | ✅ | ❌ | ❌ | ✅ | string |
| device.type | ❌ | ✅ | ✅ | ✅ | ❌ | ❌ | ✅ | string |
| device.type_id | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
| device.uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
| fqdn[] | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string |
| hostname | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string |
| installed_software[] | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string |
| metadata.log_provider | ✅ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
| metadata.modified_time | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | timestamp |
| metadata.modified_time_dt | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| metadata.product.name | ✅ | ❌ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
| metadata.product.vendor_name | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
| metadata.product.version | ❌ | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | string |
| metadata.profiles[] | ✅ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
| metadata.tenant_uid | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| metadata.version | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
| package.cpe_name | ✅ | ❌ | ❌ | ❌ | ✅ | ✅ | ❌ | string |
| package.name | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
| package.path | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| package.uid | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| package.vendor_name | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | ✅ | string |
| package.version | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
| severity | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
| severity_id | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
| start_time | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | timestamp |
| start_time_dt | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| status | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
| status_id | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
| time | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
| time_dt | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| type_name | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
| type_uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |