Cisco DNAC Attribute Reference
This reference lists the attributes that Device Security collects from Cisco DNAC,
their names as stored in Device Security, and the Device Security fields they map to.
When
Device Security integrates with Cisco DNA Center, it retrieves
details about active devices to enrich the inventory. The attributes in this reference
cover wired and wireless clients, network device health data, and network device
configuration details.
The third-party attribute name in Device Security refers to the attribute name
as it appears in the Assets Inventory table and in Query Engine. This follows the format
of third-party-name.attribute-name.
When viewing the attribute name in the Assets Inventory table column selector or on a
Device Details page, where the third-party name can be found as a header for the
attributes section, then the third-party name is removed from the attribute name.
For example, micrsoft_defender_xdr.macAddress would appear in the
Query Builder and in the Assets Inventory table, but under , the attribute would appear as macAddress.
Wired Client Attributes
Device Security collects wired client attributes from Cisco DNAC. The following table lists each Cisco DNAC attribute, its name as stored in Device Security, and the Device Security field it maps to (if applicable).
Cisco DNAC Attribute | Device Security Attribute Name | Device Security Common Attribute* | Description |
username | — | AD Username; last_ad_username | Username associated with the device |
connectionStatus | cisco_dnac.connectionStatus | connection_state | Connection status |
connectionStatus | cisco_dnac.collectionStatus | connection_state | Connection status |
name | cisco_dnac.name | hostname | Name of the device |
ipv4Address | cisco_dnac.ipv4Address | IP Address | Ipv4 address |
ipv6Addresses | cisco_dnac.ipv6Addresses | ipv6_addresses | Ipv6 addresses |
lastUpdatedTime | cisco_dnac.lastUpdatedTime | Last Activity | Last updated time |
siteHierarchy | cisco_dnac.siteHierarchy | Location | Site hierarchy |
macAddress | cisco_dnac.macAddress | MAC Address; id | MAC address |
connection.authType | cisco_dnac.connection.authType | network_authentication_method | Auth type |
connection.protocol | cisco_dnac.connection.protocol | network_connection_protocol | Protocol |
osVersion | cisco_dnac.osVersion | OS Version | OS version |
deviceType | cisco_dnac.type | raw_model | Device type |
deviceType | cisco_dnac.deviceType | raw_model | Device type |
osType | cisco_dnac.osType | raw_os | OS type |
connection.rssi | cisco_dnac.connection.rssi | RSSI | RSSI |
connection.snr | cisco_dnac.connection.snr | SNR | Signal-to-noise ratio of the device |
connection.ssid | cisco_dnac.connection.ssid | SSID | SSID |
connectedNetworkDevice.connectedNetworkDeviceManagementIp | cisco_dnac.connectedNetworkDevice.connectedNetworkDeviceManagementIp | Switch IP | Connected network device management IP |
connectedNetworkDevice.connectedNetworkDeviceMac | cisco_dnac.connectedNetworkDevice.connectedNetworkDeviceMac | Switch MAC | MAC address of the connected network device |
connectedNetworkDevice.interfaceName | cisco_dnac.connectedNetworkDevice.interfaceName | Switch Port | Interface name |
connectedNetworkDevice.connectedNetworkDeviceName | cisco_dnac.connectedNetworkDevice.connectedNetworkDeviceName | switch_name | Connected network device name |
vendor | cisco_dnac.vendor | Vendor | Device vendor |
connection.vlanId | cisco_dnac.connection.vlanId | VLAN ID | Vlan ID |
connection.band | cisco_dnac.connection.band | wifi_frequency | Band |
type | — | Wired - Wireless | Type |
connection.wlcName | cisco_dnac.connection.wlcName | wlc_name | Wlc name |
connectedNetworkDevice.connectedNetworkDeviceId | cisco_dnac.connectedNetworkDevice.connectedNetworkDeviceId | — | Connected network device ID |
connectedNetworkDevice.connectedNetworkDeviceType | cisco_dnac.connectedNetworkDevice.connectedNetworkDeviceType | — | Connected network device type |
connection.apEthernetMac | cisco_dnac.connection.apEthernetMac | — | MAC address of the AP ethernet |
connection.apMac | cisco_dnac.connection.apMac | — | MAC address of the AP |
connection.apMode | cisco_dnac.connection.apMode | — | AP mode |
connection.channel | cisco_dnac.connection.channel | — | Wireless channel |
connection.channelWidth | cisco_dnac.connection.channelWidth | — | Channel width |
connection.dataRate | cisco_dnac.connection.dataRate | — | Data rate |
connection.isFabricClient | cisco_dnac.connection.isFabricClient | — | Is fabric client |
connection.isIosAnalyticsCapable | cisco_dnac.connection.isIosAnalyticsCapable | — | Is ios analytics capable |
connection.protocolCapability | cisco_dnac.connection.protocolCapability | — | Protocol capability |
connection.radioId | cisco_dnac.connection.radioId | — | Radio ID |
connection.securityGroupTag | cisco_dnac.connection.securityGroupTag | — | Security group tag |
connection.sessionDuration | cisco_dnac.connection.sessionDuration | — | Session duration |
connection.vnId | cisco_dnac.connection.vnId | — | Vn ID |
connection.wlcId | cisco_dnac.connection.wlcId | — | Wlc ID |
formFactor | cisco_dnac.formFactor | — | Form factor |
health.connectedScore | cisco_dnac.health.connectedScore | — | Connected score |
health.onboardingScore | cisco_dnac.health.onboardingScore | — | Onboarding score |
health.overallScore | cisco_dnac.health.overallScore | — | Overall score |
health.rssiThreshold | cisco_dnac.health.rssiThreshold | — | RSSI threshold |
health.snrThreshold | cisco_dnac.health.snrThreshold | — | SNR threshold |
id | cisco_dnac.id | — | Unique identifier |
onboarding.aaaFailureReason | cisco_dnac.onboarding.aaaFailureReason | — | Aaa failure reason |
onboarding.aaaServerIp | cisco_dnac.onboarding.aaaServerIp | — | Aaa server IP |
onboarding.assocDoneTime | cisco_dnac.onboarding.assocDoneTime | — | Assoc done time |
onboarding.assocFailureReason | cisco_dnac.onboarding.assocFailureReason | — | Assoc failure reason |
onboarding.authDoneTime | cisco_dnac.onboarding.authDoneTime | — | Auth done time |
onboarding.dhcpDoneTime | cisco_dnac.onboarding.dhcpDoneTime | — | Dhcp done time |
onboarding.dhcpFailureReason | cisco_dnac.onboarding.dhcpFailureReason | — | DHCP failure reason |
onboarding.dhcpServerIp | cisco_dnac.onboarding.dhcpServerIp | — | DHCP server IP |
onboarding.onboardingTime | cisco_dnac.onboarding.onboardingTime | — | Onboarding time |
onboarding.otherFailureReason | cisco_dnac.onboarding.otherFailureReason | — | Other failure reason |
onboarding.roamingTime | cisco_dnac.onboarding.roamingTime | — | Roaming time |
siteHierarchyId | cisco_dnac.siteHierarchyId | — | Site hierarchy ID |
siteId | cisco_dnac.siteId | — | Site ID |
tracked | cisco_dnac.tracked | — | Tracked |
Wireless Client Attributes
Device Security collects wireless client attributes from Cisco DNAC. The following table lists each Cisco DNAC attribute, its name as stored in Device Security, and the Device Security field it maps to (if applicable).
Cisco DNAC Attribute | Device Security Attribute Name | Device Security Common Attribute* | Description |
username | — | AD Username; last_ad_username | Username associated with the device |
connectedNetworkDevice.connectedNetworkDeviceManagementIp | cisco_dnac.connectedNetworkDevice.connectedNetworkDeviceManagementIp | ap_ip | Connected network device management IP |
connectedNetworkDevice.connectedNetworkDeviceMac | cisco_dnac.connectedNetworkDevice.connectedNetworkDeviceMac | ap_mac | MAC address of the connected network device |
connectedNetworkDevice.connectedNetworkDeviceName | cisco_dnac.connectedNetworkDevice.connectedNetworkDeviceName | ap_name | Connected network device name |
connectionStatus | cisco_dnac.connectionStatus | connection_state | Connection status |
connectionStatus | cisco_dnac.collectionStatus | connection_state | Connection status |
name | cisco_dnac.name | hostname | Name of the device |
ipv4Address | cisco_dnac.ipv4Address | IP Address | Ipv4 address |
ipv6Addresses | cisco_dnac.ipv6Addresses | ipv6_addresses | Ipv6 addresses |
lastUpdatedTime | cisco_dnac.lastUpdatedTime | Last Activity | Last updated time |
siteHierarchy | cisco_dnac.siteHierarchy | Location | Site hierarchy |
macAddress | cisco_dnac.macAddress | MAC Address; id | MAC address |
connection.authType | cisco_dnac.connection.authType | network_authentication_method | Auth type |
osVersion | cisco_dnac.osVersion | OS Version | OS version |
connection.protocol | cisco_dnac.connection.protocol | Radio; network_connection_protocol | Protocol |
osType | cisco_dnac.osType | raw_os | OS type |
connection.rssi | cisco_dnac.connection.rssi | RSSI | RSSI |
connection.snr | cisco_dnac.connection.snr | SNR | Signal-to-noise ratio of the device |
connection.ssid | cisco_dnac.connection.ssid | SSID | SSID |
vendor | cisco_dnac.vendor | Vendor | Device vendor |
connection.vlanId | cisco_dnac.connection.vlanId | VLAN ID | Vlan ID |
connection.channel | cisco_dnac.connection.channel | wifi_channel | Wireless channel |
connection.band | cisco_dnac.connection.band | wifi_frequency | Band |
type | — | Wired - Wireless | Type |
connection.wlcName | cisco_dnac.connection.wlcName | wireles_lan_controller_name; wlc_name | Wlc name |
connectedNetworkDevice.connectedNetworkDeviceId | cisco_dnac.connectedNetworkDevice.connectedNetworkDeviceId | — | Connected network device ID |
connectedNetworkDevice.connectedNetworkDeviceType | cisco_dnac.connectedNetworkDevice.connectedNetworkDeviceType | — | Connected network device type |
connectedNetworkDevice.interfaceName | cisco_dnac.connectedNetworkDevice.interfaceName | — | Interface name |
connection.apEthernetMac | cisco_dnac.connection.apEthernetMac | — | MAC address of the AP ethernet |
connection.apMac | cisco_dnac.connection.apMac | — | MAC address of the AP |
connection.apMode | cisco_dnac.connection.apMode | — | AP mode |
connection.channelWidth | cisco_dnac.connection.channelWidth | — | Channel width |
connection.dataRate | cisco_dnac.connection.dataRate | — | Data rate |
connection.isFabricClient | cisco_dnac.connection.isFabricClient | — | Is fabric client |
connection.isIosAnalyticsCapable | cisco_dnac.connection.isIosAnalyticsCapable | — | Is ios analytics capable |
connection.protocolCapability | cisco_dnac.connection.protocolCapability | — | Protocol capability |
connection.radioId | cisco_dnac.connection.radioId | — | Radio ID |
connection.securityGroupTag | cisco_dnac.connection.securityGroupTag | — | Security group tag |
connection.sessionDuration | cisco_dnac.connection.sessionDuration | — | Session duration |
connection.vnId | cisco_dnac.connection.vnId | — | Vn ID |
connection.wlcId | cisco_dnac.connection.wlcId | — | Wlc ID |
deviceType | cisco_dnac.deviceType | — | Device type |
formFactor | cisco_dnac.formFactor | — | Form factor |
health.connectedScore | cisco_dnac.health.connectedScore | — | Connected score |
health.onboardingScore | cisco_dnac.health.onboardingScore | — | Onboarding score |
health.overallScore | cisco_dnac.health.overallScore | — | Overall score |
health.rssiThreshold | cisco_dnac.health.rssiThreshold | — | RSSI threshold |
health.snrThreshold | cisco_dnac.health.snrThreshold | — | SNR threshold |
id | cisco_dnac.id | — | Unique identifier |
onboarding.aaaFailureReason | cisco_dnac.onboarding.aaaFailureReason | — | Aaa failure reason |
onboarding.aaaServerIp | cisco_dnac.onboarding.aaaServerIp | — | Aaa server IP |
onboarding.assocDoneTime | cisco_dnac.onboarding.assocDoneTime | — | Assoc done time |
onboarding.assocFailureReason | cisco_dnac.onboarding.assocFailureReason | — | Assoc failure reason |
onboarding.authDoneTime | cisco_dnac.onboarding.authDoneTime | — | Auth done time |
onboarding.dhcpDoneTime | cisco_dnac.onboarding.dhcpDoneTime | — | Dhcp done time |
onboarding.dhcpFailureReason | cisco_dnac.onboarding.dhcpFailureReason | — | DHCP failure reason |
onboarding.dhcpServerIp | cisco_dnac.onboarding.dhcpServerIp | — | DHCP server IP |
onboarding.onboardingTime | cisco_dnac.onboarding.onboardingTime | — | Onboarding time |
onboarding.otherFailureReason | cisco_dnac.onboarding.otherFailureReason | — | Other failure reason |
onboarding.roamingTime | cisco_dnac.onboarding.roamingTime | — | Roaming time |
siteHierarchyId | cisco_dnac.siteHierarchyId | — | Site hierarchy ID |
siteId | cisco_dnac.siteId | — | Site ID |
tracked | cisco_dnac.tracked | — | Tracked |
deviceType | cisco_dnac.type | — | Device type |
Device Health Attributes
Device Security collects device health attributes from Cisco DNAC. The following table lists each Cisco DNAC attribute, its name as stored in Device Security, and the Device Security field it maps to (if applicable).
Cisco DNAC Attribute | Device Security Attribute Name | Device Security Common Attribute* | Description |
name | cisco_dnac.name | hostname | Name of the device |
ipAddress | cisco_dnac.ipAddress | IP Address | IP address |
location | cisco_dnac.Location | Location | Location |
macAddress | cisco_dnac.macAddress | MAC Address; id | MAC address |
model | cisco_dnac.model | Model | Model of the device |
osVersion | cisco_dnac.osVersion | OS Version | OS version |
deviceType | cisco_dnac.deviceType | raw_model | Device type |
cpuHealth | cisco_dnac.cpuHealth | — | CPU health |
cpuUtilization | cisco_dnac.cpuUtilization | — | CPU utilization |
deviceFamily | cisco_dnac.deviceFamily | — | Device family |
interDeviceLinkAvailHealth | cisco_dnac.interDeviceLinkAvailHealth | — | Inter device link avail health |
memoryUtilization | cisco_dnac.memoryUtilization | — | Memory utilization |
memoryUtilizationHealth | cisco_dnac.memoryUtilizationHealth | — | Memory utilization health |
overallHealth | cisco_dnac.overallHealth | — | Overall health |
reachabilityHealth | cisco_dnac.reachabilityHealth | — | Reachability health |
utilizationHealth | cisco_dnac.utilizationHealth | — | Utilization health |
|
Network Device Attributes
Device Security collects network device attributes from Cisco DNAC. The following table lists each Cisco DNAC attribute, its name as stored in Device Security, and the Device Security field it maps to (if applicable).
Cisco DNAC Attribute | Device Security Attribute Name | Device Security Common Attribute* | Description |
apManagerInterfaceIp | cisco_dnac.apManagerInterfaceIp | ap_ip | AP manager interface IP |
apEthernetMacAddress | cisco_dnac.apEthernetMacAddress | ap_mac | AP ethernet MAC address |
description | cisco_dnac.description | Description | Description |
hostname | cisco_dnac.hostname | hostname | Name of the device |
managementIpAddress | cisco_dnac.managementIpAddress | IP Address | Management IP address |
lastUpdated | cisco_dnac.lastUpdated | Last Activity | Last updated |
lastUpdated | cisco_dnac.lastUpdatedTime | Last Activity | Last updated |
locationName | cisco_dnac.locationName | Location | Location name |
macAddress | cisco_dnac.macAddress | MAC Address; id | MAC address |
platformId | cisco_dnac.platformId | Model | Platform ID |
serialNumber | cisco_dnac.serialNumber | Serial Number | Serial number |
vendor | cisco_dnac.vendor | Vendor | Device vendor |
associatedWlcIp | cisco_dnac.associatedWlcIp | wireles_lan_controller_name; wlc_ip | Associated wlc IP |
bootDateTime | cisco_dnac.bootDateTime | — | Boot date time |
collectionStatus | cisco_dnac.collectionStatus | — | Collection status |
deviceSupportLevel | cisco_dnac.deviceSupportLevel | — | Device support level |
errorCode | cisco_dnac.errorCode | — | Error code |
errorDescription | cisco_dnac.errorDescription | — | Error description |
family | cisco_dnac.family | — | Family |
id | cisco_dnac.id | — | Unique identifier |
instanceTenantId | cisco_dnac.instanceTenantId | — | Instance tenant ID |
instanceUuid | cisco_dnac.instanceUuid | — | Instance UUID |
interfaceCount | cisco_dnac.interfaceCount | — | Number of interfaces |
inventoryStatusDetail | cisco_dnac.inventoryStatusDetail | — | Inventory status detail |
location | cisco_dnac.Location | — | Location |
managementState | cisco_dnac.managementState | — | Management state |
memorySize | cisco_dnac.memorySize | — | Memory size |
reachabilityStatus | cisco_dnac.reachabilityStatus | — | Reachability status |
role | cisco_dnac.role | — | Role of the device |
series | cisco_dnac.series | — | Series |
softwareVersion | cisco_dnac.softwareVersion | — | Software version |
|
upTime | cisco_dnac.upTime | — | Up time |
uptimeSeconds | cisco_dnac.uptimeSeconds | — | Uptime seconds |
* Only some attributes map to a Device Security Common Attribute.
