# Assets Supported Fields This document shows the fields supported by each provider and operation. - [query_devices](#query_devices) ## query_devices | Field | CrowdStrike Falcon Spotlight | Nozomi Vantage | Qualys VMDR | ServiceNow CMDB | Tanium Assets | Type | | --- | --- | --- | --- | --- | --- | --- | | activity_id | ✅ | ✅ | ✅ | ✅ | ✅ | number | | activity_name | ✅ | ✅ | ✅ | ✅ | ✅ | string | | category_name | ✅ | ✅ | ✅ | ✅ | ✅ | string | | category_uid | ✅ | ✅ | ✅ | ✅ | ✅ | number | | class_name | ✅ | ✅ | ✅ | ✅ | ✅ | string | | class_uid | ✅ | ✅ | ✅ | ✅ | ✅ | number | | cloud.account.type | ❌ | ❌ | ✅ | ❌ | ❌ | string | | cloud.account.type_id | ❌ | ❌ | ✅ | ❌ | ❌ | number | | cloud.account.uid | ❌ | ❌ | ✅ | ❌ | ❌ | string | | cloud.provider | ❌ | ❌ | ✅ | ❌ | ❌ | string | | count | ✅ | ❌ | ✅ | ❌ | ✅ | number | | device.desc | ✅ | ❌ | ❌ | ❌ | ❌ | string | | device.domain | ❌ | ❌ | ✅ | ❌ | ❌ | string | | device.first_seen_time | ✅ | ✅ | ✅ | ✅ | ✅ | timestamp | | device.groups[].desc | ❌ | ❌ | ❌ | ✅ | ❌ | string | | device.groups[].name | ❌ | ✅ | ✅ | ✅ | ❌ | string | | device.groups[].type | ❌ | ✅ | ✅ | ❌ | ❌ | string | | device.groups[].uid | ❌ | ✅ | ✅ | ❌ | ❌ | string | | device.hostname | ✅ | ❌ | ✅ | ✅ | ✅ | string | | device.hw_info.bios_manufacturer | ✅ | ❌ | ❌ | ❌ | ❌ | string | | device.hw_info.bios_ver | ✅ | ❌ | ❌ | ❌ | ❌ | string | | device.hw_info.chassis | ✅ | ❌ | ❌ | ❌ | ❌ | string | | device.hw_info.cpu_cores | ❌ | ❌ | ❌ | ❌ | ✅ | number | | device.hw_info.cpu_type | ❌ | ❌ | ✅ | ❌ | ✅ | string | | device.hw_info.serial_number | ✅ | ✅ | ❌ | ✅ | ✅ | string | | device.image.uid | ❌ | ❌ | ✅ | ❌ | ❌ | string | | device.instance_uid | ✅ | ❌ | ✅ | ❌ | ✅ | string | | device.ip | ✅ | ✅ | ✅ | ✅ | ✅ | string | | device.ip_addresses[] | ❌ | ✅ | ❌ | ❌ | ✅ | string | | device.last_seen_time | ✅ | ✅ | ✅ | ✅ | ✅ | timestamp | | device.mac | ✅ | ✅ | ❌ | ✅ | ✅ | string | | device.mac_addresses[] | ❌ | ✅ | ❌ | ❌ | ✅ | string | | device.modified_time | ✅ | ❌ | ❌ | ✅ | ❌ | timestamp | | device.name | ✅ | ✅ | ❌ | ✅ | ❌ | string | | device.network_interfaces[].hostname | ❌ | ❌ | ✅ | ❌ | ❌ | string | | device.network_interfaces[].ip | ❌ | ✅ | ✅ | ❌ | ❌ | string | | device.network_interfaces[].name | ❌ | ✅ | ❌ | ❌ | ❌ | string | | device.network_interfaces[].type | ❌ | ✅ | ❌ | ❌ | ❌ | string | | device.network_interfaces[].type_id | ❌ | ✅ | ✅ | ❌ | ❌ | number | | device.network_status | ✅ | ❌ | ❌ | ❌ | ✅ | string | | device.network_status_id | ✅ | ❌ | ❌ | ❌ | ✅ | number | | device.org.name | ✅ | ❌ | ❌ | ❌ | ❌ | string | | device.org.uid | ✅ | ❌ | ❌ | ❌ | ❌ | string | | device.os.build | ✅ | ❌ | ❌ | ❌ | ❌ | string | | device.os.name | ✅ | ✅ | ❌ | ❌ | ✅ | string | | device.os.type | ✅ | ✅ | ❌ | ❌ | ✅ | string | | device.os.type_id | ✅ | ✅ | ❌ | ❌ | ✅ | number | | device.os.version | ✅ | ❌ | ❌ | ❌ | ✅ | string | | device.region | ❌ | ❌ | ✅ | ❌ | ❌ | string | | device.risk_level | ❌ | ✅ | ❌ | ❌ | ❌ | string | | device.risk_level_id | ❌ | ✅ | ❌ | ❌ | ❌ | number | | device.risk_score | ❌ | ✅ | ✅ | ❌ | ❌ | number | | device.subnet_uid | ❌ | ❌ | ✅ | ❌ | ❌ | string | | device.sw_info[].name | ❌ | ❌ | ❌ | ❌ | ✅ | string | | device.sw_info[].vendor_name | ❌ | ❌ | ❌ | ❌ | ✅ | string | | device.sw_info[].version | ❌ | ❌ | ❌ | ❌ | ✅ | string | | device.type | ✅ | ✅ | ✅ | ✅ | ❌ | string | | device.type_id | ✅ | ✅ | ✅ | ✅ | ✅ | number | | device.uid | ✅ | ✅ | ✅ | ✅ | ✅ | string | | device.uid_alt | ❌ | ❌ | ❌ | ✅ | ❌ | string | | device.vendor.name | ❌ | ✅ | ❌ | ❌ | ❌ | string | | device.vlan_uid | ❌ | ✅ | ❌ | ❌ | ❌ | string | | device.vpc_uid | ❌ | ❌ | ✅ | ❌ | ❌ | string | | device.zone | ✅ | ❌ | ✅ | ❌ | ❌ | string | | duration | ❌ | ❌ | ✅ | ❌ | ❌ | number | | message | ✅ | ❌ | ❌ | ❌ | ❌ | string | | metadata.labels[] | ✅ | ❌ | ✅ | ❌ | ❌ | string | | metadata.loggers[].logged_time | ❌ | ❌ | ✅ | ❌ | ❌ | timestamp | | metadata.loggers[].name | ✅ | ❌ | ✅ | ❌ | ❌ | string | | metadata.loggers[].product.vendor_name | ❌ | ❌ | ✅ | ❌ | ❌ | string | | metadata.loggers[].version | ✅ | ❌ | ❌ | ❌ | ❌ | string | | metadata.product.name | ❌ | ✅ | ✅ | ✅ | ❌ | string | | metadata.product.vendor_name | ✅ | ✅ | ✅ | ✅ | ✅ | string | | metadata.product.version | ✅ | ❌ | ❌ | ❌ | ❌ | string | | metadata.version | ✅ | ✅ | ✅ | ✅ | ✅ | string | | network_interfaces[].mac | ❌ | ❌ | ❌ | ❌ | ✅ | string | | network_interfaces[].name | ❌ | ❌ | ❌ | ❌ | ✅ | string | | network_interfaces[].type | ❌ | ❌ | ❌ | ❌ | ✅ | string | | network_interfaces[].uid | ❌ | ❌ | ❌ | ❌ | ✅ | string | | observables[].name | ❌ | ❌ | ✅ | ❌ | ❌ | string | | observables[].type | ❌ | ❌ | ✅ | ❌ | ❌ | string | | observables[].type_id | ❌ | ❌ | ✅ | ❌ | ❌ | number | | observables[].value | ❌ | ❌ | ✅ | ❌ | ❌ | string | | result.activity_id | ✅ | ❌ | ❌ | ❌ | ❌ | number | | result.activity_name | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.category_name | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.category_uid | ✅ | ❌ | ❌ | ❌ | ❌ | number | | result.class_uid | ✅ | ❌ | ❌ | ❌ | ❌ | number | | result.device.desc | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.device.first_seen_time | ✅ | ❌ | ❌ | ❌ | ❌ | timestamp | | result.device.hostname | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.device.hw_info.bios_manufacturer | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.device.hw_info.bios_ver | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.device.hw_info.chassis | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.device.hw_info.serial_number | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.device.instance_uid | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.device.ip | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.device.last_seen_time | ✅ | ❌ | ❌ | ❌ | ❌ | timestamp | | result.device.mac | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.device.modified_time | ✅ | ❌ | ❌ | ❌ | ❌ | timestamp | | result.device.name | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.device.network_status | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.device.network_status_id | ✅ | ❌ | ❌ | ❌ | ❌ | number | | result.device.org.name | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.device.org.uid | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.device.os.name | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.device.os.type | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.device.os.type_id | ✅ | ❌ | ❌ | ❌ | ❌ | number | | result.device.os.version | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.device.type | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.device.type_id | ✅ | ❌ | ❌ | ❌ | ❌ | number | | result.device.uid | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.device.zone | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.message | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.metadata.labels[] | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.metadata.loggers[].name | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.metadata.loggers[].version | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.metadata.product.name | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.metadata.product.vendor_name | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.metadata.version | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.raw_data | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.severity | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.severity_id | ✅ | ❌ | ❌ | ❌ | ❌ | number | | result.status | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.status_id | ✅ | ❌ | ❌ | ❌ | ❌ | number | | result.time | ✅ | ❌ | ❌ | ❌ | ❌ | number | | result.type_name | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.type_uid | ✅ | ❌ | ❌ | ❌ | ❌ | number | | result.unmapped.connection_mac_address | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.unmapped.default_gateway_ip | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.unmapped.deployment_type | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.unmapped.kernel_version | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.unmapped.local_ip | ✅ | ❌ | ❌ | ❌ | ❌ | string | | result.unmapped.provision_status | ✅ | ❌ | ❌ | ❌ | ❌ | string | | severity | ✅ | ✅ | ✅ | ✅ | ✅ | string | | severity_id | ✅ | ✅ | ✅ | ✅ | ✅ | number | | status | ✅ | ❌ | ✅ | ❌ | ❌ | string | | status_id | ✅ | ❌ | ✅ | ❌ | ✅ | number | | time | ✅ | ✅ | ✅ | ✅ | ✅ | number | | type_name | ✅ | ✅ | ✅ | ✅ | ✅ | string | | type_uid | ✅ | ✅ | ✅ | ✅ | ✅ | number |