Assets Supported Fields

This document shows the fields supported by each provider and operation.

query_devices

query_devices

Field	CrowdStrike Falcon Spotlight	Nozomi Vantage	Qualys VMDR	ServiceNow CMDB	Tanium Assets	Type
activity_id	✅	✅	✅	✅	✅	number
activity_name	✅	✅	✅	✅	✅	string
category_name	✅	✅	✅	✅	✅	string
category_uid	✅	✅	✅	✅	✅	number
class_name	❌	✅	✅	✅	✅	string
class_uid	✅	✅	✅	✅	✅	number
cloud.account.type	❌	❌	✅	❌	❌	string
cloud.account.type_id	❌	❌	✅	❌	❌	number
cloud.account.uid	❌	❌	✅	❌	❌	string
cloud.provider	❌	❌	✅	❌	❌	string
count	✅	❌	✅	❌	✅	number
device.desc	✅	❌	❌	❌	❌	string
device.domain	❌	❌	✅	❌	❌	string
device.first_seen_time	✅	✅	✅	✅	✅	timestamp
device.groups[].desc	❌	❌	❌	✅	❌	string
device.groups[].name	❌	✅	✅	✅	❌	string
device.groups[].type	❌	✅	✅	❌	❌	string
device.groups[].uid	❌	✅	✅	❌	❌	string
device.hostname	✅	❌	✅	✅	✅	string
device.hw_info.bios_manufacturer	✅	❌	❌	❌	❌	string
device.hw_info.bios_ver	✅	❌	❌	❌	❌	string
device.hw_info.chassis	✅	❌	❌	❌	❌	string
device.hw_info.cpu_type	❌	❌	✅	❌	❌	string
device.hw_info.serial_number	✅	✅	❌	✅	✅	string
device.image.uid	❌	❌	✅	❌	❌	string
device.instance_uid	✅	❌	✅	❌	✅	string
device.ip	✅	✅	✅	✅	✅	string
device.ip_addresses[]	❌	✅	❌	❌	✅	string
device.last_seen_time	✅	✅	✅	✅	✅	timestamp
device.mac	✅	✅	❌	✅	✅	string
device.mac_addresses[]	❌	✅	❌	❌	✅	string
device.modified_time	✅	❌	❌	✅	❌	timestamp
device.name	✅	✅	❌	✅	❌	string
device.network_interfaces[].hostname	❌	❌	✅	❌	❌	string
device.network_interfaces[].ip	❌	✅	✅	❌	❌	string
device.network_interfaces[].name	❌	✅	❌	❌	❌	string
device.network_interfaces[].type	❌	✅	❌	❌	❌	string
device.network_interfaces[].type_id	❌	✅	✅	❌	❌	number
device.network_status	✅	❌	❌	❌	❌	string
device.network_status_id	✅	❌	❌	❌	❌	number
device.org.name	✅	❌	❌	❌	❌	string
device.org.uid	✅	❌	❌	❌	❌	string
device.os.build	✅	❌	❌	❌	❌	string
device.os.name	✅	✅	❌	❌	✅	string
device.os.type	✅	✅	❌	❌	❌	string
device.os.type_id	✅	✅	❌	❌	✅	number
device.os.version	✅	❌	❌	❌	✅	string
device.region	❌	❌	✅	❌	❌	string
device.risk_level	❌	✅	❌	❌	❌	string
device.risk_level_id	❌	✅	❌	❌	❌	number
device.risk_score	❌	✅	✅	❌	❌	number
device.subnet_uid	❌	❌	✅	❌	❌	string
device.sw_info[].name	❌	❌	❌	❌	✅	string
device.sw_info[].vendor_name	❌	❌	❌	❌	✅	string
device.sw_info[].version	❌	❌	❌	❌	✅	string
device.type	✅	✅	✅	✅	❌	string
device.type_id	✅	✅	✅	✅	✅	number
device.uid	✅	✅	✅	✅	✅	string
device.uid_alt	❌	❌	❌	✅	❌	string
device.vendor.name	❌	✅	❌	❌	❌	string
device.vlan_uid	❌	✅	❌	❌	❌	string
device.vpc_uid	❌	❌	✅	❌	❌	string
device.zone	✅	❌	✅	❌	❌	string
duration	❌	❌	✅	❌	❌	number
message	✅	❌	❌	❌	❌	string
metadata.labels[]	✅	❌	✅	❌	❌	string
metadata.loggers[].logged_time	❌	❌	✅	❌	❌	timestamp
metadata.loggers[].name	✅	❌	✅	❌	❌	string
metadata.loggers[].product.vendor_name	❌	❌	✅	❌	❌	string
metadata.loggers[].version	✅	❌	❌	❌	❌	string
metadata.product.name	❌	✅	✅	✅	❌	string
metadata.product.vendor_name	✅	✅	✅	✅	✅	string
metadata.product.version	✅	❌	❌	❌	❌	string
metadata.version	✅	✅	✅	✅	✅	string
observables[].name	❌	❌	✅	❌	❌	string
observables[].type	❌	❌	✅	❌	❌	string
observables[].type_id	❌	❌	✅	❌	❌	number
observables[].value	❌	❌	✅	❌	❌	string
result.activity_id	✅	❌	❌	❌	❌	number
result.activity_name	✅	❌	❌	❌	❌	string
result.category_name	✅	❌	❌	❌	❌	string
result.category_uid	✅	❌	❌	❌	❌	number
result.class_uid	✅	❌	❌	❌	❌	number
result.device.desc	✅	❌	❌	❌	❌	string
result.device.first_seen_time	✅	❌	❌	❌	❌	timestamp
result.device.hostname	✅	❌	❌	❌	❌	string
result.device.hw_info.bios_manufacturer	✅	❌	❌	❌	❌	string
result.device.hw_info.bios_ver	✅	❌	❌	❌	❌	string
result.device.hw_info.chassis	✅	❌	❌	❌	❌	string
result.device.hw_info.serial_number	✅	❌	❌	❌	❌	string
result.device.instance_uid	✅	❌	❌	❌	❌	string
result.device.ip	✅	❌	❌	❌	❌	string
result.device.last_seen_time	✅	❌	❌	❌	❌	timestamp
result.device.mac	✅	❌	❌	❌	❌	string
result.device.modified_time	✅	❌	❌	❌	❌	timestamp
result.device.name	✅	❌	❌	❌	❌	string
result.device.network_status	✅	❌	❌	❌	❌	string
result.device.network_status_id	✅	❌	❌	❌	❌	number
result.device.org.name	✅	❌	❌	❌	❌	string
result.device.org.uid	✅	❌	❌	❌	❌	string
result.device.os.name	✅	❌	❌	❌	❌	string
result.device.os.type	✅	❌	❌	❌	❌	string
result.device.os.type_id	✅	❌	❌	❌	❌	number
result.device.os.version	✅	❌	❌	❌	❌	string
result.device.type	✅	❌	❌	❌	❌	string
result.device.type_id	✅	❌	❌	❌	❌	number
result.device.uid	✅	❌	❌	❌	❌	string
result.device.zone	✅	❌	❌	❌	❌	string
result.message	✅	❌	❌	❌	❌	string
result.metadata.labels[]	✅	❌	❌	❌	❌	string
result.metadata.loggers[].name	✅	❌	❌	❌	❌	string
result.metadata.loggers[].version	✅	❌	❌	❌	❌	string
result.metadata.product.name	✅	❌	❌	❌	❌	string
result.metadata.product.vendor_name	✅	❌	❌	❌	❌	string
result.metadata.version	✅	❌	❌	❌	❌	string
result.raw_data	✅	❌	❌	❌	❌	string
result.severity	✅	❌	❌	❌	❌	string
result.severity_id	✅	❌	❌	❌	❌	number
result.status	✅	❌	❌	❌	❌	string
result.status_id	✅	❌	❌	❌	❌	number
result.time	✅	❌	❌	❌	❌	number
result.type_name	✅	❌	❌	❌	❌	string
result.type_uid	✅	❌	❌	❌	❌	number
result.unmapped.connection_mac_address	✅	❌	❌	❌	❌	string
result.unmapped.default_gateway_ip	✅	❌	❌	❌	❌	string
result.unmapped.deployment_type	✅	❌	❌	❌	❌	string
result.unmapped.kernel_version	✅	❌	❌	❌	❌	string
result.unmapped.local_ip	✅	❌	❌	❌	❌	string
result.unmapped.provision_status	✅	❌	❌	❌	❌	string
severity	✅	✅	✅	✅	❌	string
severity_id	✅	✅	✅	✅	✅	number
status	✅	❌	✅	❌	❌	string
status_id	✅	❌	✅	❌	✅	number
time	✅	✅	✅	✅	✅	number
type_name	✅	✅	❌	✅	❌	string
type_uid	✅	✅	✅	✅	✅	number

Assets Supported Fields

query_devices

Was this helpful?