>
    Strata Copilot
    ServiceNow Attribute Reference
    Focus
    Download PDF
    Focus
    1. Home
    2. Device Security
    3. Device Security Integration Guide
    4. Attribute Reference
    5. ServiceNow Attribute Reference
    Download PDF
    Device Security

    ServiceNow Attribute Reference

    Table of Contents

    ServiceNow Attribute Reference

    This reference lists the attributes that Device Security collects from ServiceNow, their names as stored in Device Security, and the Device Security fields they map to.
    When Device Security integrates with ServiceNow, it enables asset management workflows by syncing device data with the ServiceNow platform. The attributes in this reference cover device identification and network details used to create and update ServiceNow configuration item records.
    The third-party attribute name in Device Security refers to the attribute name as it appears in the Assets Inventory table and in Query Engine. This follows the format of third-party-name.attribute-name. When viewing the attribute name in the Assets Inventory table column selector or on a Device Details page, where the third-party name can be found as a header for the attributes section, then the third-party name is removed from the attribute name.
    For example, micrsoft_defender_xdr.macAddress would appear in the Query Builder and in the Assets Inventory table, but under Device DetailsAttributesIntegration Specific AttributesMicrosoft Defender, the attribute would appear as macAddress.

    V2 Graphql Cmdb Devices Attributes

    Device Security collects v2 graphql cmdb devices attributes from ServiceNow. The following table lists each ServiceNow attribute, its name as stored in Device Security, and the Device Security field it maps to (if applicable).
    ServiceNow Attribute
    Device Security Attribute Name
    Device Security Common Attribute*
    Description
    category.display_value
    servicenow.category
    Category
    Display value
    name.display_value
    —
    hostname
    Display value
    ip_address.value
    —
    IP Address
    Value
    mac_address.value
    —
    MAC; id
    Value
    os_service_pack.display_value
    servicenow.os_service_pack
    OS Service Pack
    Display value
    os_version.display_value
    servicenow.os_version
    OS Version
    Display value
    os.value
    —
    raw_os
    Value
    serial_number.display_value
    servicenow.serial_number
    Serial Number
    Display value
    asset_tag.display_value
    servicenow.asset_tag
    tags
    Display value
    vendor.display_value
    servicenow.vendor
    Vendor
    Display value
    allotted_electric_power.display_value
    servicenow.allotted_electric_power
    —
    Display value
    allotted_electric_power_unit.display_value
    servicenow.allotted_electric_power_unit
    —
    Display value
    asset.display_value
    servicenow.asset
    —
    Display value
    assigned.display_value
    servicenow.assigned
    —
    Display value
    assigned_to.display_value
    servicenow.assigned_to
    —
    Display value
    attestation_score.display_value
    servicenow.attestation_score
    —
    Display value
    attestation_status.display_value
    servicenow.attestation_status
    —
    Display value
    attested.display_value
    servicenow.attested
    —
    Display value
    attested_by.display_value
    servicenow.attested_by
    —
    Display value
    business_unit.display_value
    servicenow.business_unit
    —
    Display value
    cd_rom.display_value
    servicenow.cd_rom
    —
    Display value
    cd_speed.display_value
    servicenow.cd_speed
    —
    Display value
    cmdb_ot_entity.display_value
    servicenow.cmdb_ot_entity
    —
    Display value
    comments.display_value
    servicenow.comments
    —
    Display value
    company.display_value
    servicenow.company
    —
    Display value
    cost.display_value
    servicenow.cost
    —
    Display value
    cost_cc.display_value
    servicenow.cost_cc
    —
    Display value
    cost_center.display_value
    servicenow.cost_center
    —
    Display value
    department.display_value
    servicenow.department
    —
    Display value
    discovery_source.display_value
    servicenow.discovery_source
    —
    Display value
    fqdn.display_value
    servicenow.fqdn
    —
    Display value
    hardware_status.display_value
    servicenow.hardware_status
    —
    Display value
    ip_address.display_value
    servicenow.ip_address
    —
    Display value
    operational_status.display_value
    servicenow.operational_status
    —
    Display value
    os.display_value
    servicenow.os
    —
    Display value
    po_number.display_value
    servicenow.po_number
    —
    Display value
    * Only some attributes map to a Device Security Common Attribute.

    © 2026 Palo Alto Networks, Inc. All rights reserved.