Aruba ClearPass Attribute Reference
This reference lists the attributes that Device Security collects from Aruba ClearPass,
their names as stored in Device Security, and the Device Security fields they map to.
The third-party attribute name in Device Security refers to the attribute name
as it appears in the Assets Inventory table and in Query Engine. This follows the format
of third-party-name.attribute-name.
When viewing the attribute name in the Assets Inventory table column selector or on a
Device Details page, where the third-party name can be found as a header for the
attributes section, then the third-party name is removed from the attribute name.
For example, micrsoft_defender_xdr.macAddress would appear in the
Query Builder and in the Assets Inventory table, but under , the attribute would appear as macAddress.
Endpoint Attributes
Device Security collects endpoint attributes from Aruba ClearPass. The following table lists each Aruba ClearPass attribute, its name as stored in Device Security, and the Device Security field it maps to (if applicable).
Aruba ClearPass Attribute | Device Security Attribute Name | Device Security Common Attribute* | Description |
user | aruba_clearpass.user | AD Username | User |
domain | aruba_clearpass.domain | domain | Domain |
device_name | aruba_clearpass.device_name | hostname | Device name |
mac | aruba_clearpass.mac | id; MAC Address | MAC address |
mac | aruba_clearpass.mac_address | id; MAC Address | MAC address |
ip | aruba_clearpass.ip | IP Address | IP |
updated_at | aruba_clearpass.updated_at | Last Activity | Updated at |
aruba_user_vlan | aruba_clearpass.aruba_user_vlan | VLAN ID | Aruba user VLAN |
aruba_user_role | aruba_clearpass.aruba_user_role | — | Aruba user role |
device_category | aruba_clearpass.device_category | — | Device category |
device_family | aruba_clearpass.device_family | — | Device family |
ipv6 | aruba_clearpass.ipv6 | — | Ipv6 |
is_conflict | aruba_clearpass.is_conflict | — | Is conflict |
is_online | aruba_clearpass.is_online | — | Is online |
other_category | aruba_clearpass.other_category | — | Other category |
other_family | aruba_clearpass.other_family | — | Other family |
other_name | aruba_clearpass.other_name | — | Other name |
roles | aruba_clearpass.roles | — | Roles |
spt | aruba_clearpass.spt | — | Spt |
Session Attributes
Device Security collects session attributes from Aruba ClearPass. The following table lists each Aruba ClearPass attribute, its name as stored in Device Security, and the Device Security field it maps to (if applicable).
Aruba ClearPass Attribute | Device Security Attribute Name | Device Security Common Attribute* | Description |
username | aruba_clearpass.username | AD Username | Username associated with the device |
ap_name | aruba_clearpass.ap_name | ap_name | Ap name |
mac_address | aruba_clearpass.mac_address | id; MAC Address | MAC address |
framedipaddress | aruba_clearpass.framedipaddress | IP Address | Framedipaddress |
ssid | aruba_clearpass.ssid | SSID | SSID |
arubauservlan | aruba_clearpass.arubauservlan | VLAN ID | Arubauservlan |
acct_id | aruba_clearpass.acct_id | — | Acct ID |
acctinputoctets | aruba_clearpass.acctinputoctets | — | Acctinputoctets |
acctoutputoctets | aruba_clearpass.acctoutputoctets | — | Acctoutputoctets |
acctsessionid | aruba_clearpass.acctsessionid | — | Accounting session ID |
acctsessiontime | aruba_clearpass.acctsessiontime | — | Acctsessiontime |
acctstarttime | aruba_clearpass.acctstarttime | — | Acctstarttime |
acctstoptime | aruba_clearpass.acctstoptime | — | Acctstoptime |
acctterminatecause | aruba_clearpass.acctterminatecause | — | Acctterminatecause |
arubauserrole | aruba_clearpass.arubauserrole | — | Arubauserrole |
calledstationid | aruba_clearpass.calledstationid | — | Called station ID |
callingstationid | aruba_clearpass.callingstationid | — | Calling station ID |
cppm_uuid | aruba_clearpass.cppm_uuid | — | Cppm UUID |
id | aruba_clearpass.id | — | Unique identifier |
nas_name | aruba_clearpass.nas_name | — | Nas name |
nasipaddress | aruba_clearpass.nasipaddress | — | Nasipaddress |
nasportid | aruba_clearpass.nasportid | — | NAS port ID |
nasporttype | aruba_clearpass.nasporttype | — | Nasporttype |
role_name | aruba_clearpass.role_name | — | Role name |
servicetype | aruba_clearpass.servicetype | — | Servicetype |
state | aruba_clearpass.session.state | — | State |
sponsor_email | aruba_clearpass.sponsor_email | — | Sponsor email |
sponsor_name | aruba_clearpass.sponsor_name | — | Sponsor name |
sponsor_profile_name | aruba_clearpass.sponsor_profile_name | — | Sponsor profile name |
state | aruba_clearpass.state | — | State |
total_traffic | aruba_clearpass.total_traffic | — | Total traffic |
updated_at | aruba_clearpass.updated_at | — | Updated at |
visitor_carrier | aruba_clearpass.visitor_carrier | — | Visitor carrier |
visitor_company | aruba_clearpass.visitor_company | — | Visitor company |
visitor_name | aruba_clearpass.visitor_name | — | Visitor name |
visitor_phone | aruba_clearpass.visitor_phone | — | Visitor phone |
Wired Session Attributes
Device Security collects wired session attributes from Aruba ClearPass. The following table lists each Aruba ClearPass attribute, its name as stored in Device Security, and the Device Security field it maps to (if applicable).
Aruba ClearPass Attribute | Device Security Attribute Name | Device Security Common Attribute* | Description |
username | aruba_clearpass.username | AD Username | Username associated with the device |
mac_address | aruba_clearpass.mac_address | id; MAC Address | MAC address |
framedipaddress | aruba_clearpass.framedipaddress | IP Address | Framedipaddress |
nasipaddress | aruba_clearpass.nasipaddress | Switch IP | Nasipaddress |
calledstationid | aruba_clearpass.calledstationid | Switch MAC | Called station ID |
nas_name | aruba_clearpass.nas_name | switch_name | Nas name |
arubauservlan | aruba_clearpass.arubauservlan | VLAN ID | Arubauservlan |
acct_id | aruba_clearpass.acct_id | — | Acct ID |
acctinputoctets | aruba_clearpass.acctinputoctets | — | Acctinputoctets |
acctoutputoctets | aruba_clearpass.acctoutputoctets | — | Acctoutputoctets |
acctsessionid | aruba_clearpass.acctsessionid | — | Accounting session ID |
acctsessiontime | aruba_clearpass.acctsessiontime | — | Acctsessiontime |
acctstarttime | aruba_clearpass.acctstarttime | — | Acctstarttime |
acctstoptime | aruba_clearpass.acctstoptime | — | Acctstoptime |
acctterminatecause | aruba_clearpass.acctterminatecause | — | Acctterminatecause |
ap_name | aruba_clearpass.ap_name | — | Ap name |
arubauserrole | aruba_clearpass.arubauserrole | — | Arubauserrole |
callingstationid | aruba_clearpass.callingstationid | — | Calling station ID |
cppm_uuid | aruba_clearpass.cppm_uuid | — | Cppm UUID |
id | aruba_clearpass.id | — | Unique identifier |
nasportid | aruba_clearpass.nasportid | — | NAS port ID |
nasporttype | aruba_clearpass.nasporttype | — | Nasporttype |
role_name | aruba_clearpass.role_name | — | Role name |
servicetype | aruba_clearpass.servicetype | — | Servicetype |
state | aruba_clearpass.session.state | — | State |
sponsor_email | aruba_clearpass.sponsor_email | — | Sponsor email |
sponsor_name | aruba_clearpass.sponsor_name | — | Sponsor name |
sponsor_profile_name | aruba_clearpass.sponsor_profile_name | — | Sponsor profile name |
ssid | aruba_clearpass.ssid | — | SSID |
state | aruba_clearpass.state | — | State |
total_traffic | aruba_clearpass.total_traffic | — | Total traffic |
updated_at | aruba_clearpass.updated_at | — | Updated at |
visitor_carrier | aruba_clearpass.visitor_carrier | — | Visitor carrier |
visitor_company | aruba_clearpass.visitor_company | — | Visitor company |
visitor_name | aruba_clearpass.visitor_name | — | Visitor name |
visitor_phone | aruba_clearpass.visitor_phone | — | Visitor phone |
Endpoint Attributes (Legacy)
Device Security collects endpoint attributes (legacy) from Aruba ClearPass. The following table lists each Aruba ClearPass attribute, its name as stored in Device Security, and the Device Security field it maps to (if applicable).
Aruba ClearPass Attribute | Device Security Attribute Name | Device Security Common Attribute* | Description |
mac_address | aruba_clearpass.mac_address | MAC Address; id | MAC address |
added_at | aruba_clearpass.added_at | — | Added at |
attributes | aruba_clearpass.attributes | — | Attributes |
id | aruba_clearpass.id | — | Unique identifier |
randomized_mac | aruba_clearpass.randomized_mac | — | MAC address of the randomized |
status | aruba_clearpass.status | — | Status of the device |
updated_at | aruba_clearpass.updated_at | — | Updated at |
* Only some attributes map to a Device Security Common Attribute.
