Device Security
Infoblox Attribute Reference
Table of Contents
Expand All
|
Collapse All
Device Security Docs
Infoblox Attribute Reference
This reference lists the attributes that Device Security collects from Infoblox,
their names as stored in Device Security, and the Device Security fields they map to.
When Device Security integrates with Infoblox IPAM, it imports IP
address management data to enrich the device inventory with network topology
information. The attributes in this reference cover fixed address records, IPv4
addresses, networks, and network containers.
The third-party attribute name in Device Security refers to the attribute name
as it appears in the Assets Inventory table and in Query Engine. This follows the format
of third-party-name.attribute-name.
When viewing the attribute name in the Assets Inventory table column selector or on a
Device Details page, where the third-party name can be found as a header for the
attributes section, then the third-party name is removed from the attribute name.
For example, micrsoft_defender_xdr.macAddress would appear in the
Query Builder and in the Assets Inventory table, but under Device DetailsAttributesIntegration Specific AttributesMicrosoft Defender, the attribute would appear as macAddress.
Fixed Address Attributes
Device Security collects device attributes from the Infoblox fixedaddress API object. Each record represents a static or reserved DHCP entry, where the IP address is permanently assigned to a specific MAC address.
The following table lists each Infoblox attribute, its name as stored
in Device Security, and the Device Security field it maps to (if applicable).
Infoblox Attribute | Device Security Attribute Name | Device Security Common Attribute* | Description |
|---|---|---|---|
comment | ipam_infoblox.comment | Description | Comment or description for the fixed address record |
dhcp_lease_time | ipam_infoblox.dhcp_lease_time | dhcp_lease_expiry_time | DHCP lease duration |
ipv4addr | ipam_infoblox.ipv4addr | ipv4_address | IPv4 address of the fixed address record |
is_ip_address_static | ipam_infoblox.is_ip_address_static | — | Indicates whether the IP address is statically assigned |
mac | ipam_infoblox.mac | id; MAC | MAC address |
match_client | ipam_infoblox.match_client | — | Method used to match the DHCP client to the fixed address |
name | ipam_infoblox.name | Hostname | Name |
network | ipam_infoblox.network | — | Network address of the subnet containing the fixed address |
IPv4 Address Attributes
Device Security collects device attributes from the Infoblox ipv4address API object. Each record represents a discovered IP address and may include network topology and virtualization data collected by Infoblox network discovery.
The following table lists each Infoblox attribute, its name as stored
in Device Security, and the Device Security field it maps to (if applicable).
Infoblox Attribute | Device Security Attribute Name | Device Security Common Attribute* | Description |
|---|---|---|---|
comment | ipam_infoblox.comment | — | Comment or description for the IPv4 address record |
discover_now_status | ipam_infoblox.discover_now_status | — | Status of the on-demand discovery request |
discovered_data.cmp_type | ipam_infoblox.discovered_data.cmp_type | — | CMP type |
discovered_data.discovered_name | ipam_infoblox.discovered_data.discovered_name | — | Discovered name |
discovered_data.discoverer | ipam_infoblox.discovered_data.discoverer | — | Discoverer |
discovered_data.first_discovered | ipam_infoblox.discovered_data.first_discovered | — | First discovered |
discovered_data.last_discovered | ipam_infoblox.discovered_data.last_discovered | — | Last discovered |
discovered_data.mac_address | — | MAC; id | MAC address discovered for the IP address |
discovered_data.network_component_name | ipam_infoblox.discovered_data.network_component_name | — | Network component name |
discovered_data.network_component_type | ipam_infoblox.discovered_data.network_component_type | — | Network component type |
discovered_data.os | ipam_infoblox.discovered_data.os | raw_os | Operating system |
discovered_data.v_adapter | ipam_infoblox.discovered_data.v_adapter | — | Virtual adapter |
discovered_data.v_datacenter | ipam_infoblox.discovered_data.v_datacenter | — | Virtual datacenter |
discovered_data.v_entity_name | ipam_infoblox.discovered_data.v_entity_name | — | Virtual entity name |
discovered_data.v_entity_type | ipam_infoblox.discovered_data.v_entity_type | — | Virtual entity type |
discovered_data.v_host | ipam_infoblox.discovered_data.v_host | — | Virtual host |
discovered_data.v_switch | ipam_infoblox.discovered_data.v_switch | — | Virtual switch |
discovered_data.vmhost_mac_address | ipam_infoblox.discovered_data.vmhost_mac_address | — | VM host MAC address |
discovered_data.vmhost_name | ipam_infoblox.discovered_data.vmhost_name | — | VM host name |
discovered_data.vmhost_nic_names | ipam_infoblox.discovered_data.vmhost_nic_names | — | VM host NIC names |
discovered_data.vmi_id | ipam_infoblox.discovered_data.vmi_id | — | VM interface ID |
discovered_data.vmi_ip_type | ipam_infoblox.discovered_data.vmi_ip_type | — | VM interface IP type |
discovered_data.vmi_is_public_address | ipam_infoblox.discovered_data.vmi_is_public_address | — | VM interface public address indicator |
discovered_data.vmi_name | ipam_infoblox.discovered_data.vmi_name | — | VM interface name |
discovered_data.vmi_tenant_id | ipam_infoblox.discovered_data.vmi_tenant_id | — | VM interface tenant ID |
discovered_data.vport_mac_address | ipam_infoblox.discovered_data.vport_mac_address | — | Virtual port MAC address |
discovered_data.vswitch_id | ipam_infoblox.discovered_data.vswitch_id | — | Virtual switch ID |
discovered_data.vswitch_name | ipam_infoblox.discovered_data.vswitch_name | — | Virtual switch name |
discovered_data.vswitch_type | ipam_infoblox.discovered_data.vswitch_type | — | Virtual switch type |
ip_address | — | ipv4_address | IPv4 address of the record |
is_conflict | ipam_infoblox.is_conflict | — | Indicates whether the IP address has a conflict |
lease_state | ipam_infoblox.lease_state | — | Current DHCP lease state of the IP address |
mac_address | ipam_infoblox.discovered_data.mac_address; ipam_infoblox.mac_address | — | MAC address |
names.[0] | ipam_infoblox.names | — | DNS name associated with the IP address |
status | ipam_infoblox.status | — | Status |
Network Attributes
Device Security collects subnet attributes from the Infoblox network API object. Each record represents an individual subnet configured in Infoblox IPAM.
The following table lists each Infoblox attribute, its name as stored
in Device Security, and the Device Security field it maps to (if applicable).
Infoblox Attribute | Device Security Attribute Name | Device Security Common Attribute* | Description |
|---|---|---|---|
comment | ipam_infoblox.description | Description | Device description |
extattrs.Site.value | ipam_infoblox.extattrs.Site | Site | Site name from the network's extensible attributes |
extattrs.VLAN.value | ipam_infoblox.extattrs.VLAN | VLAN ID | VLAN ID from the network's extensible attributes |
network | ipam_infoblox.network | type; prefix; id | Network address and prefix length of the subnet |
network_container | ipam_infoblox.network_container | Parent ID | Network container that contains this subnet |
Network Container Attributes
Device Security collects subnet block attributes from the Infoblox network_container API object. Each record represents a parent address block or supernet that contains one or more subnets.
The following table lists each Infoblox attribute, its name as stored
in Device Security, and the Device Security field it maps to (if applicable).
Infoblox Attribute | Device Security Attribute Name | Device Security Common Attribute* | Description |
|---|---|---|---|
comment | — | Description | Comment or description for the network container |
extattrs.Site.value | ipam_infoblox.extattrs.Site | Site | Site name from the network container's extensible attributes |
extattrs.VLAN.value | ipam_infoblox.extattrs.VLAN | VLAN ID | VLAN ID from the network container's extensible attributes |
network | ipam_infoblox.network | id; prefix | Network address and prefix length of the network container |
network_container | ipam_infoblox.network_container | — | Parent network container address |
* Only some attributes map to a Device Security Common Attribute.