Manage Engine Attribute Reference
This reference lists the attributes that Device Security collects from Manage Engine,
their names as stored in Device Security, and the Device Security fields they map to.
Device Security integrates with ManageEngine to enrich the device inventory with
IT and endpoint management data. The attributes in this reference cover computer
records from the ServiceDesk Plus SOM module, MDM-managed devices, network
interface details, and vulnerability findings.
The third-party attribute name in Device Security refers to the attribute name
as it appears in the Assets Inventory table and in Query Engine. This follows the format
of third-party-name.attribute-name.
When viewing the attribute name in the Assets Inventory table column selector or on a
Device Details page, where the third-party name can be found as a header for the
attributes section, then the third-party name is removed from the attribute name.
For example, micrsoft_defender_xdr.macAddress would appear in the
Query Builder and in the Assets Inventory table, but under , the attribute would appear as macAddress.
Computer Attributes
Device Security collects computer attributes from Manage Engine. The following table lists each Manage Engine attribute, its name as stored in Device Security, and the Device Security field it maps to (if applicable).
Manage Engine Attribute | Device Security Attribute Name | Device Security Common Attribute* | Description |
fqdn_name | manage_engine.fqdn_name | hostname | Fqdn name |
ip_address | manage_engine.ip_address | IP Address | IP address |
location | manage_engine.location | Location | Location |
mac_address | manage_engine.mac_address | MAC Address; id | MAC address |
os_name | manage_engine.os_name | OS Name | Os name |
service_pack | manage_engine.service_pack | OS Service Pack | Service pack |
os_version | manage_engine.os_version | OS Version | OS version |
installed_software | — | third_party_learned_installed_software | Installed software |
agent_executed_on | manage_engine.agent_executed_on | — | Agent executed on |
agent_installed_on | manage_engine.agent_installed_on | — | Agent installed on |
agent_last_bootup_time | manage_engine.agent_last_bootup_time | — | Agent last bootup time |
agent_last_contact_time | manage_engine.agent_last_contact_time | — | Agent last contact time |
agent_logged_on_users | manage_engine.agent_logged_on_users | — | Agent logged on users |
agent_uninstalled_on | manage_engine.agent_uninstalled_on | — | Agent uninstalled on |
agent_upgraded_on | manage_engine.agent_upgraded_on | — | Agent upgraded on |
agent_version | manage_engine.agent_version | — | Agent version |
branch_office_name | manage_engine.branch_office_name | — | Branch office name |
computer.processor_arch_type_id | manage_engine.computer.processor_arch_type_id | — | Processor arch type ID |
computer.processor_architecture | manage_engine.computer.processor_architecture | — | Processor architecture |
computer_live_status | manage_engine.computer_live_status | — | Computer live status |
computer_status_update_time | manage_engine.computer_status_update_time | — | Computer status update time |
customer_id | manage_engine.customer_id | — | Customer ID |
customer_name | manage_engine.customer_name | — | Customer name |
description | manage_engine.description | — | Description |
domain_netbios_name | manage_engine.domain_netbios_name | — | Domain netbios name |
error_code | manage_engine.error_code | — | Error code |
error_kb_url | manage_engine.error_kb_url | — | Error kb URL |
full_name | manage_engine.full_name | — | Full name |
installation_status | manage_engine.installation_status | — | Installation status |
last_sync_time | manage_engine.last_sync_time | — | Last sync time |
managed_status | manage_engine.managed_status | — | Managed status |
managedcomputer.agent_status | manage_engine.managedcomputer.agent_status | — | Agent status |
managedcomputer.agent_version_num | manage_engine.managedcomputer.agent_version_num | — | Agent version num |
managedcomputer.friendly_name | manage_engine.managedcomputer.friendly_name | — | Friendly name |
managedcomputer.friendly_name_type | manage_engine.managedcomputer.friendly_name_type | — | Friendly name type |
managedcomputer.previous_installation_status | manage_engine.managedcomputer.previous_installation_status | — | Previous installation status |
managedcomputer.re_installation_status | manage_engine.managedcomputer.re_installation_status | — | Re installation status |
managedcomputertoerrcode.operation_type | manage_engine.managedcomputertoerrcode.operation_type | — | Operation type |
modernappdetails.enrollment_type | manage_engine.modernappdetails.enrollment_type | — | Enrollment type |
modernappdetails.installed_at | manage_engine.modernappdetails.installed_at | — | Installed at |
modernappdetails.last_contact_time | manage_engine.modernappdetails.last_contact_time | — | Last contact time |
modernappdetails.remarks | manage_engine.modernappdetails.remarks | — | Remarks |
modernappdetails.status | manage_engine.modernappdetails.status | — | Status of the device |
os_platform | manage_engine.os_platform | — | OS platform |
os_platform_name | manage_engine.os_platform_name | — | Os platform name |
osflavor_id | manage_engine.osflavor_id | — | Osflavor ID |
owner | manage_engine.owner | — | Owner |
owner_email_id | manage_engine.owner_email_id | — | Owner email ID |
processorarchtype.processor_arch_name | manage_engine.processorarchtype.processor_arch_name | — | Processor arch name |
remarks | manage_engine.remarks | — | Remarks |
remarks_args | manage_engine.remarks_args | — | Remarks args |
resource_id | manage_engine.resource_id | — | Resource ID |
resource_id_string | manage_engine.resource_id_string | — | Resource ID string |
resource_name | manage_engine.resource_name | — | Resource name |
resourcemacip.dhcp_server_ip_address | manage_engine.resourcemacip.dhcp_server_ip_address | — | DHCP server IP address |
resourcemacip.gateway_ip_address | manage_engine.resourcemacip.gateway_ip_address | — | Gateway IP address |
resourcemacip.subnet_ip_address | manage_engine.resourcemacip.subnet_ip_address | — | Subnet IP address |
resourcemacip.subnet_mask | manage_engine.resourcemacip.subnet_mask | — | Subnet mask of the device's network |
search_tag | manage_engine.search_tag | — | Search tag |
status_label | manage_engine.status_label | — | Status label |
Mobile Device Attributes
Device Security collects mobile device attributes from Manage Engine. The following table lists each Manage Engine attribute, its name as stored in Device Security, and the Device Security field it maps to (if applicable).
Manage Engine Attribute | Device Security Attribute Name | Device Security Common Attribute* | Description |
device_name | — | hostname | Device name |
wifi_mac | manage_engine.wifi_mac | id; MAC Address | MAC address of the wifi |
imei | manage_engine.imei | imei | IMEI |
model | manage_engine.model | Model | Model of the device |
os_version | manage_engine.os_version | OS Version | OS version |
platform_type | manage_engine.platform_type | os_type | Platform type |
serial_number | manage_engine.serial_number | Serial Number | Serial number |
installed_applications | — | third_party_learned_installed_software | Installed applications |
customer_id | manage_engine.customer_id | — | Customer ID |
customer_name | manage_engine.customer_name | — | Customer name |
device_capacity | manage_engine.device_capacity | — | Device capacity |
device_id | manage_engine.device_id | — | Device ID |
device_type | manage_engine.device_type | — | Device type |
is_lost_mode_enabled | manage_engine.is_lost_mode_enabled | — | Is lost mode enabled |
is_removed | manage_engine.is_removed | — | Is removed |
is_supervised | manage_engine.is_supervised | — | Is supervised |
last_contact_time | manage_engine.last_contact_time | — | Last contact time |
managed_status | manage_engine.managed_status | — | Managed status |
owned_by | manage_engine.owned_by | — | Owned by |
platform_type_id | manage_engine.platform_type_id | — | Platform type ID |
product_name | manage_engine.product_name | — | Product name |
udid | manage_engine.udid | — | UDID |
user.user_email | manage_engine.user.user_email | — | User email |
user.user_id | manage_engine.user.user_id | — | User ID |
user.user_name | manage_engine.user.user_name | — | User name |
Computer Interface Attributes
Device Security collects computer interface attributes from Manage Engine. The following table lists each Manage Engine attribute, its name as stored in Device Security, and the Device Security field it maps to (if applicable).
Manage Engine Attribute | Device Security Attribute Name | Device Security Common Attribute* | Description |
ip_address | — | IP Address | IP address |
mac_address | — | MAC Address; id | MAC address |
detailed_summary.computer_network_adapter_summary | — | third_party_learned_network_interfaces | Computer network adapter summary |
Threats Systemreport Vulnerabilities Attributes
Device Security collects threats systemreport vulnerabilities attributes from Manage Engine. The following table lists each Manage Engine attribute, its name as stored in Device Security, and the Device Security field it maps to (if applicable).
Manage Engine Attribute | Device Security Attribute Name | Device Security Common Attribute* | Description |
cveids | manage_engine.cveids | cve | Cveids |
cvss_2_score | manage_engine.cvss_2_score | cvss_base_score | Cvss 2 score |
cvss_3_score | manage_engine.cvss_3_score | cvss_v3base_score | Cvss 3 score |
updatedtime | manage_engine.updatedtime | detected_time | Updatedtime |
mac_address | manage_engine.mac_address | id | Mac address |
ip_address | manage_engine.ip_address | IP Address | IP address |
severity | manage_engine.severity | risk_level; severity | Severity |
patch | manage_engine.patch | third_party_learned_os_kb_articles | Patch |
vulnerabilityname | manage_engine.vulnerabilityname | title | Vulnerabilityname |
vulnerabilityid | manage_engine.vulnerabilityid | vulnerability_id | Vulnerability ID |
fqdn_name | manage_engine.fqdn_name | — | Fqdn name |
reference_links | manage_engine.reference_links | — | Reference links |
resource_id | manage_engine.resource_id | — | Resource ID |
resource_name | manage_engine.resource_name | — | Resource name |
vulnerability_status | manage_engine.vulnerability_status | — | Vulnerability status |
* Only some attributes map to a Device Security Common Attribute.
