This document shows the fields supported by each provider and operation.
| Field | CrowdStrike Falcon Spotlight | Ivanti Neurons | Nozomi Vantage | Qualys VMDR | ServiceNow CMDB | Tanium Assets | [MOCK] Ivanti Neurons | Type |
|---|---|---|---|---|---|---|---|---|
| activity_id | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
| activity_name | ❌ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
| category_name | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
| category_uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
| class_name | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
| class_uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
| cloud.account.type | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
| cloud.account.type_id | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | number |
| cloud.account.uid | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
| cloud.provider | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
| count | ✅ | ✅ | ❌ | ✅ | ❌ | ✅ | ✅ | number |
| device.desc | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
| device.domain | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
| device.first_seen_time | ✅ | ❌ | ✅ | ✅ | ✅ | ✅ | ❌ | timestamp |
| device.groups[].desc | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string |
| device.groups[].name | ❌ | ❌ | ✅ | ✅ | ✅ | ❌ | ❌ | string |
| device.groups[].type | ❌ | ❌ | ✅ | ✅ | ❌ | ❌ | ❌ | string |
| device.groups[].uid | ❌ | ❌ | ✅ | ✅ | ❌ | ❌ | ❌ | string |
| device.hostname | ✅ | ✅ | ❌ | ✅ | ✅ | ✅ | ✅ | string |
| device.hw_info.bios_manufacturer | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
| device.hw_info.bios_ver | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
| device.hw_info.chassis | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
| device.hw_info.cpu_cores | ❌ | ✅ | ❌ | ❌ | ❌ | ✅ | ✅ | number |
| device.hw_info.cpu_count | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ✅ | number |
| device.hw_info.cpu_type | ❌ | ✅ | ❌ | ✅ | ❌ | ✅ | ✅ | string |
| device.hw_info.ram_size | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ✅ | number |
| device.hw_info.serial_number | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | ✅ | string |
| device.image.uid | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
| device.instance_uid | ✅ | ✅ | ❌ | ✅ | ❌ | ✅ | ✅ | string |
| device.ip | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
| device.ip_addresses[] | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | string |
| device.last_seen_time | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | timestamp |
| device.mac | ✅ | ✅ | ✅ | ❌ | ✅ | ✅ | ✅ | string |
| device.mac_addresses[] | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ | string |
| device.modified_time | ✅ | ✅ | ❌ | ❌ | ✅ | ❌ | ✅ | timestamp |
| device.name | ✅ | ✅ | ✅ | ❌ | ✅ | ❌ | ✅ | string |
| device.network_interfaces[].hostname | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
| device.network_interfaces[].ip | ❌ | ❌ | ✅ | ✅ | ❌ | ❌ | ❌ | string |
| device.network_interfaces[].name | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | string |
| device.network_interfaces[].type | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | string |
| device.network_interfaces[].type_id | ❌ | ❌ | ✅ | ✅ | ❌ | ❌ | ❌ | number |
| device.network_status | ✅ | ✅ | ❌ | ❌ | ❌ | ✅ | ✅ | string |
| device.network_status_id | ✅ | ✅ | ❌ | ❌ | ❌ | ✅ | ✅ | number |
| device.org.name | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| device.org.uid | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| device.os.build | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
| device.os.name | ✅ | ✅ | ✅ | ❌ | ❌ | ✅ | ✅ | string |
| device.os.type | ✅ | ✅ | ✅ | ❌ | ❌ | ✅ | ✅ | string |
| device.os.type_id | ✅ | ✅ | ✅ | ❌ | ❌ | ✅ | ✅ | number |
| device.os.version | ✅ | ✅ | ❌ | ❌ | ❌ | ✅ | ✅ | string |
| device.region | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
| device.risk_level | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | string |
| device.risk_level_id | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | number |
| device.risk_score | ❌ | ❌ | ✅ | ✅ | ❌ | ❌ | ❌ | number |
| device.subnet_uid | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
| device.sw_info[].name | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
| device.sw_info[].vendor_name | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
| device.sw_info[].version | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
| device.type | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ | ✅ | string |
| device.type_id | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
| device.uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
| device.uid_alt | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | string |
| device.vendor.name | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | string |
| device.vlan_uid | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | string |
| device.vpc_uid | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
| device.zone | ✅ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
| duration | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | number |
| message | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
| metadata.labels[] | ✅ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
| metadata.loggers[].agent_id | ❌ | ✅ | ❌ | ❌ | ❌ | ❌ | ✅ | string |
| metadata.loggers[].logged_time | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | timestamp |
| metadata.loggers[].name | ✅ | ✅ | ❌ | ✅ | ❌ | ❌ | ✅ | string |
| metadata.loggers[].product.vendor_name | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
| metadata.loggers[].version | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| metadata.product.name | ❌ | ❌ | ✅ | ✅ | ✅ | ❌ | ❌ | string |
| metadata.product.vendor_name | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
| metadata.product.version | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| metadata.version | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
| network_interfaces[].mac | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
| network_interfaces[].name | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
| network_interfaces[].type | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
| network_interfaces[].uid | ❌ | ❌ | ❌ | ❌ | ❌ | ✅ | ❌ | string |
| observables[].name | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
| observables[].type | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
| observables[].type_id | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | number |
| observables[].value | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ❌ | string |
| result.activity_id | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | number |
| result.activity_name | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.category_name | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.category_uid | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | number |
| result.class_uid | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | number |
| result.device.desc | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.device.first_seen_time | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | timestamp |
| result.device.hostname | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.device.hw_info.bios_manufacturer | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.device.hw_info.bios_ver | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.device.hw_info.chassis | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.device.hw_info.serial_number | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.device.instance_uid | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.device.ip | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.device.last_seen_time | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | timestamp |
| result.device.mac | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.device.modified_time | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | timestamp |
| result.device.name | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.device.network_status | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.device.network_status_id | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | number |
| result.device.org.name | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.device.org.uid | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.device.os.name | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.device.os.type | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.device.os.type_id | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | number |
| result.device.os.version | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.device.type | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.device.type_id | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | number |
| result.device.uid | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.device.zone | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.message | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.metadata.labels[] | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.metadata.loggers[].name | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.metadata.loggers[].version | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.metadata.product.name | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.metadata.product.vendor_name | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.metadata.version | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.raw_data | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.severity | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.severity_id | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | number |
| result.status | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.status_id | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | number |
| result.time | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | number |
| result.type_name | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | string |
| result.type_uid | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ | ❌ | number |
| severity | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
| severity_id | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
| status | ✅ | ✅ | ❌ | ✅ | ❌ | ❌ | ✅ | string |
| status_id | ✅ | ✅ | ❌ | ✅ | ❌ | ✅ | ✅ | number |
| time | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |
| type_name | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | string |
| type_uid | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | number |