Device Security
ManageEngine Attribute Reference
Table of Contents
Expand All
|
Collapse All
Device Security Docs
ManageEngine Attribute Reference
This reference lists the attributes that Device Security collects from ManageEngine,
their names as stored in Device Security, and the Device Security fields they map to.
Device Security integrates with ManageEngine to enrich the device inventory with
IT and endpoint management data. The attributes in this reference cover computer
records from the ServiceDesk Plus SOM module, MDM-managed devices, network
interface details, and vulnerability findings.
The third-party attribute name in Device Security refers to the attribute name
as it appears in the Assets Inventory table and in Query Engine. This follows the format
of third-party-name.attribute-name.
When viewing the attribute name in the Assets Inventory table column selector or on a
Device Details page, where the third-party name can be found as a header for the
attributes section, then the third-party name is removed from the attribute name.
For example, micrsoft_defender_xdr.macAddress would appear in the
Query Builder and in the Assets Inventory table, but under Device DetailsAttributesIntegration Specific AttributesMicrosoft Defender, the attribute would appear as macAddress.
SOM Computer Attributes
Device Security collects computer attributes from the ManageEngine ServiceDesk Plus (SOM) computers API. Each record describes a managed Windows computer.
The following table lists each ManageEngine attribute, its name as stored in
Device Security, and the Device Security field it maps to (if applicable).
ManageEngine Attribute | Device Security Attribute Name | Device Security Common Attribute* | Description |
|---|---|---|---|
ip_address | — | ipv4_address | IPv4 address of the device |
mac_address | — | MAC Address | MAC address of the device |
installed_software | — | third_party_learned_installed_software | Installed software data collected from the device |
service_pack | — | OS Service Pack | Operating system service pack version |
os_version | — | OS Version | Operating system version |
os_name | — | OS Name | Operating system name |
location | — | Location | Physical location of the device |
fqdn_name | — | Hostname | Hostname of the device |
status_label | manage_engine.status_label | — | Status label for the device |
service_pack | manage_engine.service_pack | — | Operating system service pack version |
search_tag | manage_engine.search_tag | — | Search tag assigned to the device |
resourcemacip.subnet_mask | manage_engine.resourcemacip.subnet_mask | — | Subnet mask |
resourcemacip.subnet_ip_address | manage_engine.resourcemacip.subnet_ip_address | — | Subnet IP address |
resourcemacip.gateway_ip_address | manage_engine.resourcemacip.gateway_ip_address | — | Default gateway IP address |
resourcemacip.dhcp_server_ip_address | manage_engine.resourcemacip.dhcp_server_ip_address | — | IP address of the DHCP server |
resource_name | manage_engine.resource_name | — | Resource name in ManageEngine |
resource_id_string | manage_engine.resource_id_string | — | Resource ID as a string |
resource_id | manage_engine.resource_id | — | Resource ID in ManageEngine |
remarks_args | manage_engine.remarks_args | — | Arguments for the remarks field |
remarks | manage_engine.remarks | — | Remarks or notes about the device |
processorarchtype.processor_arch_name | manage_engine.processorarchtype.processor_arch_name | — | Processor architecture name |
owner_email_id | manage_engine.owner_email_id | — | Email address of the device owner |
owner | manage_engine.owner | — | Owner of the device |
osflavor_id | manage_engine.osflavor_id | — | Operating system flavor ID |
os_version | manage_engine.os_version | — | Operating system version |
os_platform_name | manage_engine.os_platform_name | — | Operating system platform name |
os_platform | manage_engine.os_platform | — | Operating system platform identifier |
os_name | manage_engine.os_name | — | Operating system name |
modernappdetails.status | manage_engine.modernappdetails.status | — | Status of the modern app |
modernappdetails.remarks | manage_engine.modernappdetails.remarks | — | Remarks about the modern app |
modernappdetails.last_contact_time | manage_engine.modernappdetails.last_contact_time | — | Last contact time for the modern app |
modernappdetails.installed_at | manage_engine.modernappdetails.installed_at | — | Date and time the modern app was installed |
modernappdetails.enrollment_type | manage_engine.modernappdetails.enrollment_type | — | Enrollment type for the modern app |
managedcomputertoerrcode.operation_type | manage_engine.managedcomputertoerrcode.operation_type | — | Operation type associated with the error code |
managedcomputer.re_installation_status | manage_engine.managedcomputer.re_installation_status | — | Agent reinstallation status |
managedcomputer.previous_installation_status | manage_engine.managedcomputer.previous_installation_status | — | Previous agent installation status |
managedcomputer.friendly_name_type | manage_engine.managedcomputer.friendly_name_type | — | Type of friendly name used |
mac_address | manage_engine.mac_address | — | MAC address of the device |
managedcomputer.friendly_name | manage_engine.managedcomputer.friendly_name | — | Friendly display name of the managed computer |
managedcomputer.agent_version_num | manage_engine.managedcomputer.agent_version_num | — | Numeric version of the ManageEngine agent |
managedcomputer.agent_status | manage_engine.managedcomputer.agent_status | — | Status of the ManageEngine agent on the device |
managed_status | manage_engine.managed_status | — | Management status of the device |
location | manage_engine.location | — | Physical location of the device |
last_sync_time | manage_engine.last_sync_time | — | Date and time the device last synchronized with the server |
ip_address | manage_engine.ip_address | — | IP address of the device |
installation_status | manage_engine.installation_status | — | Agent installation status |
full_name | manage_engine.full_name | — | Full display name of the device |
fqdn_name | manage_engine.fqdn_name | — | Fully qualified domain name of the device |
error_kb_url | manage_engine.error_kb_url | — | Knowledge base URL for the error code |
error_code | manage_engine.error_code | — | Error code for the last operation |
domain_netbios_name | manage_engine.domain_netbios_name | — | NetBIOS name of the domain |
description | manage_engine.description | — | Device description |
customer_name | manage_engine.customer_name | — | Customer name in ManageEngine |
customer_id | manage_engine.customer_id | — | Customer ID in ManageEngine |
computer_status_update_time | manage_engine.computer_status_update_time | — | Date and time the device status was last updated |
computer_live_status | manage_engine.computer_live_status | — | Current live status of the device |
computer.processor_architecture | manage_engine.computer.processor_architecture | — | Processor architecture (e.g., x64, ARM) |
computer.processor_arch_type_id | manage_engine.computer.processor_arch_type_id | — | Processor architecture type ID |
branch_office_name | manage_engine.branch_office_name | — | Name of the branch office |
agent_version | manage_engine.agent_version | — | Version of the ManageEngine agent |
agent_upgraded_on | manage_engine.agent_upgraded_on | — | Date and time the agent was last upgraded |
agent_uninstalled_on | manage_engine.agent_uninstalled_on | — | Date and time the agent was uninstalled |
agent_logged_on_users | manage_engine.agent_logged_on_users | — | Users currently logged on to the device |
agent_last_contact_time | manage_engine.agent_last_contact_time | — | Date and time the agent last contacted the server |
agent_last_bootup_time | manage_engine.agent_last_bootup_time | — | Date and time the device last booted |
agent_installed_on | manage_engine.agent_installed_on | — | Date and time the ManageEngine agent was installed |
agent_executed_on | manage_engine.agent_executed_on | — | Date and time the ManageEngine agent was executed |
MDM Device Attributes
Device Security collects mobile device attributes from the ManageEngine Mobile Device Manager Plus (MDM) API. Each record describes a managed mobile device.
The following table lists each ManageEngine attribute, its name as stored in
Device Security, and the Device Security field it maps to (if applicable).
ManageEngine Attribute | Device Security Attribute Name | Device Security Common Attribute* | Description |
|---|---|---|---|
installed_applications | — | third_party_learned_installed_software | Installed software data collected from the device |
— | — | Mobile IMEI | IMEI number of the mobile device |
wifi_mac | manage_engine.wifi_mac | — | Wi-Fi MAC address of the mobile device |
— | manage_engine.user.user_name | — | Username of the assigned user |
— | manage_engine.user.user_id | — | User ID of the assigned user |
— | manage_engine.user.user_email | — | Email address of the assigned user |
udid | manage_engine.udid | — | Unique device identifier (UDID) |
serial_number | manage_engine.serial_number | — | Device serial number |
product_name | manage_engine.product_name | — | Product name of the mobile device |
platform_type_id | manage_engine.platform_type_id | — | Platform type ID |
platform_type | manage_engine.platform_type | — | Platform type of the mobile device (e.g., iOS, Android) |
owned_by | manage_engine.owned_by | — | Ownership type of the device (e.g., corporate, personal) |
os_version | manage_engine.os_version | — | Operating system version |
model | manage_engine.model | — | Device model |
managed_status | manage_engine.managed_status | — | Management status of the device |
last_contact_time | manage_engine.last_contact_time | — | Date and time the device last contacted ManageEngine |
is_supervised | manage_engine.is_supervised | — | Indicates whether the device is supervised |
is_removed | manage_engine.is_removed | — | Indicates whether the device has been removed from management |
is_lost_mode_enabled | manage_engine.is_lost_mode_enabled | — | Indicates whether lost mode is enabled on the device |
imei | manage_engine.imei | — | IMEI number of the mobile device |
device_type | manage_engine.device_type | — | Device type (e.g., smartphone, tablet) |
device_id | manage_engine.device_id | — | Device ID in ManageEngine MDM |
device_capacity | manage_engine.device_capacity | — | Storage capacity of the mobile device |
customer_name | manage_engine.customer_name | — | Customer name in ManageEngine |
customer_id | manage_engine.customer_id | — | Customer ID in ManageEngine |
device_name | — | Hostname | Hostname of the device |
platform_type | — | os_type | Operating system type |
model | — | Model | Device model |
os_version | — | OS Version | Operating system version |
serial_number | — | Serial Number | Device serial number |
wifi_mac | — | MAC Address | MAC address of the device |
Network Interface Attributes
Device Security collects network interface attributes from the ManageEngine SOM computers interface data. Each record describes a network adapter on a managed computer.
The following table lists each ManageEngine attribute, its name as stored in
Device Security, and the Device Security field it maps to (if applicable).
ManageEngine Attribute | Device Security Attribute Name | Device Security Common Attribute* | Description |
|---|---|---|---|
— | — | third_party_learned_network_interfaces | Network interface data collected from the device |
mac_address | — | MAC Address | MAC address of the device |
ip_address | — | ipv4_address | IPv4 address of the device |
Vulnerability Attributes
Device Security collects vulnerability attributes from the ManageEngine Patch Manager Plus vulnerability report. Each record describes a vulnerability detected on a managed device.
The following table lists each ManageEngine attribute, its name as stored in
Device Security, and the Device Security field it maps to (if applicable).
ManageEngine Attribute | Device Security Attribute Name | Device Security Common Attribute* | Description |
|---|---|---|---|
patch | — | third_party_learned_os_kb_articles | OS patch or KB article data |
severity | — | risk_level | Risk level of the vulnerability |
vulnerabilityname | — | title | Title of the vulnerability |
vulnerabilityname | manage_engine.vulnerabilityname | — | Vulnerability name |
vulnerabilityid | manage_engine.vulnerabilityid | — | Vulnerability ID |
vulnerability_status | manage_engine.vulnerability_status | — | Current status of the vulnerability |
updatedtime | manage_engine.updatedtime | — | Date and time the vulnerability record was last updated |
severity | manage_engine.severity | — | Severity level of the vulnerability |
reference_links | manage_engine.reference_links | — | Reference links for the vulnerability |
patch | manage_engine.patch | — | Patch or KB article associated with the vulnerability |
cvss_3_score | manage_engine.cvss_3_score | — | CVSS v3 base score |
cvss_2_score | manage_engine.cvss_2_score | — | CVSS v2 base score |
cveids | manage_engine.cveids | — | CVE identifiers associated with the vulnerability |
mac_address | manage_engine.mac_address | — | MAC address of the device |
resource_name | manage_engine.resource_name | — | Resource name in ManageEngine |
resource_id | manage_engine.resource_id | — | Resource ID in ManageEngine |
ip_address | manage_engine.ip_address | — | IP address of the device |
fqdn_name | manage_engine.fqdn_name | — | Fully qualified domain name of the device |
updatedtime | — | detected_time | Date and time the vulnerability was detected |
vulnerabilityid | — | vulnerability_id | Vulnerability identifier |
severity | — | Severity | Severity level of the vulnerability |
cvss_2_score | — | cvss_base_score | CVSS v2 base score |
cvss_3_score | — | cvss_v3base_score | CVSS v3 base score |
cveids | — | cve | CVE identifiers associated with the vulnerability |
ip_address | — | ipv4_address | IPv4 address of the device |
* Only some attributes map to a Device Security Common Attribute.