Try it free

Internet of Things

  • Latest Dynatrace
  • Reference

Contains entity definitions for Azure Internet of Things stored in Smartscape on Grail. Entities are prefixed with AZURE_.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for Azure Internet of Things entity types.

smartscapeNodes "AZURE_MICROSOFT_AZURESPHERE*"
| append [ smartscapeNodes "AZURE_MICROSOFT_CONNECTEDCACHE*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_DEVICEREGISTRY*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_DEVICES*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_DEVICEUPDATE*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_DIGITALTWINS*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_IOTCENTRAL*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_IOTFIRMWAREDEFENSE*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_IOTOPERATIONS*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_IOTOPERATIONSDATAPROCESSOR*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_IOTOPERATIONSMQ*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_IOTOPERATIONSORCHESTRATOR*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_TIMESERIESINSIGHTS*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_WINDOWSIOT*" ]

Permission fields

  • azure.subscription
  • azure.resource.group
  • dt.security_context

Accounts

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_DEVICEUPDATE_ACCOUNTS

Accounts in Azure Device Update.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_DEVICEUPDATE_ACCOUNTS"

smartscapeNodes "AZURE_MICROSOFT_DEVICEUPDATE_ACCOUNTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Asset endpoint profiles

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_DEVICEREGISTRY_ASSETENDPOINTPROFILES

Asset endpoint profiles in Azure Device Registry.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_DEVICEREGISTRY_ASSETENDPOINTPROFILES"

smartscapeNodes "AZURE_MICROSOFT_DEVICEREGISTRY_ASSETENDPOINTPROFILES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Assets

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_DEVICEREGISTRY_ASSETS

Assets in Azure Device Registry.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_DEVICEREGISTRY_ASSETS"

smartscapeNodes "AZURE_MICROSOFT_DEVICEREGISTRY_ASSETS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Billing containers

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_DEVICEREGISTRY_BILLINGCONTAINERS

Billing containers in Azure Device Registry.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_DEVICEREGISTRY_BILLINGCONTAINERS"

smartscapeNodes "AZURE_MICROSOFT_DEVICEREGISTRY_BILLINGCONTAINERS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Cache nodes

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_CONNECTEDCACHE_CACHENODES

Cache nodes in Microsoft Connected Cache.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_CONNECTEDCACHE_CACHENODES"

smartscapeNodes "AZURE_MICROSOFT_CONNECTEDCACHE_CACHENODES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Catalogs

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AZURESPHERE_CATALOGS

Catalogs in Azure Sphere.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AZURESPHERE_CATALOGS"

smartscapeNodes "AZURE_MICROSOFT_AZURESPHERE_CATALOGS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Device services

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_WINDOWSIOT_DEVICESERVICES

Device services in Windows IoT.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_WINDOWSIOT_DEVICESERVICES"

smartscapeNodes "AZURE_MICROSOFT_WINDOWSIOT_DEVICESERVICES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Digital twins instances

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_DIGITALTWINS_DIGITALTWINSINSTANCES

Digital twins instances in Azure Digital Twins.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_DIGITALTWINS_DIGITALTWINSINSTANCES"

smartscapeNodes "AZURE_MICROSOFT_DIGITALTWINS_DIGITALTWINSINSTANCES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Discovered asset endpoint profiles

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_DEVICEREGISTRY_DISCOVEREDASSETENDPOINTPROFILES

Discovered asset endpoint profiles in Azure Device Registry.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_DEVICEREGISTRY_DISCOVEREDASSETENDPOINTPROFILES"

smartscapeNodes "AZURE_MICROSOFT_DEVICEREGISTRY_DISCOVEREDASSETENDPOINTPROFILES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Discovered assets

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_DEVICEREGISTRY_DISCOVEREDASSETS

Discovered assets in Azure Device Registry.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_DEVICEREGISTRY_DISCOVEREDASSETS"

smartscapeNodes "AZURE_MICROSOFT_DEVICEREGISTRY_DISCOVEREDASSETS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Enterprise MCC customers

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_CONNECTEDCACHE_ENTERPRISEMCCCUSTOMERS

Enterprise MCC customers in Microsoft Connected Cache.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_CONNECTEDCACHE_ENTERPRISEMCCCUSTOMERS"

smartscapeNodes "AZURE_MICROSOFT_CONNECTEDCACHE_ENTERPRISEMCCCUSTOMERS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Enterprise customers

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_CONNECTEDCACHE_ENTERPRISECUSTOMERS

Enterprise customers in Microsoft Connected Cache.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_CONNECTEDCACHE_ENTERPRISECUSTOMERS"

smartscapeNodes "AZURE_MICROSOFT_CONNECTEDCACHE_ENTERPRISECUSTOMERS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Environments

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_TIMESERIESINSIGHTS_ENVIRONMENTS

Environments in Azure Time Series Insights.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_TIMESERIESINSIGHTS_ENVIRONMENTS"

smartscapeNodes "AZURE_MICROSOFT_TIMESERIESINSIGHTS_ENVIRONMENTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

IOT central application

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_IOTCENTRAL_IOTAPPS

Azure IoT Central SaaS application for IoT device management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_IOTCENTRAL_IOTAPPS"

smartscapeNodes "AZURE_MICROSOFT_IOTCENTRAL_IOTAPPS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

IOT firmware defense workspaces

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_IOTFIRMWAREDEFENSE_WORKSPACES

IOT firmware defense workspaces in Azure IoT Firmware Defense.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_IOTFIRMWAREDEFENSE_WORKSPACES"

smartscapeNodes "AZURE_MICROSOFT_IOTFIRMWAREDEFENSE_WORKSPACES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

IOT operations MQ

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_IOTOPERATIONSMQ_MQ

Azure IoT Operations MQ.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_IOTOPERATIONSMQ_MQ"

smartscapeNodes "AZURE_MICROSOFT_IOTOPERATIONSMQ_MQ"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Instances

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_IOTOPERATIONSORCHESTRATOR_INSTANCES

Instances in Azure IoT Operations Orchestrator.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_IOTOPERATIONSORCHESTRATOR_INSTANCES"

smartscapeNodes "AZURE_MICROSOFT_IOTOPERATIONSORCHESTRATOR_INSTANCES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

IoT Hub

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_DEVICES_IOTHUBS

Azure IoT Hub managed service for bidirectional communication with IoT devices.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_DEVICES_IOTHUBS"

smartscapeNodes "AZURE_MICROSOFT_DEVICES_IOTHUBS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

IoT Hub device provisioning service

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_DEVICES_PROVISIONINGSERVICES

Zero-touch device provisioning service for Azure IoT Hub.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_DEVICES_PROVISIONINGSERVICES"

smartscapeNodes "AZURE_MICROSOFT_DEVICES_PROVISIONINGSERVICES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Isp customers

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_CONNECTEDCACHE_ISPCUSTOMERS

Isp customers in Microsoft Connected Cache.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_CONNECTEDCACHE_ISPCUSTOMERS"

smartscapeNodes "AZURE_MICROSOFT_CONNECTEDCACHE_ISPCUSTOMERS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Namespaces

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_DEVICEREGISTRY_NAMESPACES

Namespaces in Azure Device Registry.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_DEVICEREGISTRY_NAMESPACES"

smartscapeNodes "AZURE_MICROSOFT_DEVICEREGISTRY_NAMESPACES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Schema registries

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_DEVICEREGISTRY_SCHEMAREGISTRIES

Schema registries in Azure Device Registry.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_DEVICEREGISTRY_SCHEMAREGISTRIES"

smartscapeNodes "AZURE_MICROSOFT_DEVICEREGISTRY_SCHEMAREGISTRIES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Solutions

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_IOTOPERATIONSORCHESTRATOR_SOLUTIONS

Solutions in Azure IoT Operations Orchestrator.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_IOTOPERATIONSORCHESTRATOR_SOLUTIONS"

smartscapeNodes "AZURE_MICROSOFT_IOTOPERATIONSORCHESTRATOR_SOLUTIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Targets

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_IOTOPERATIONSORCHESTRATOR_TARGETS

Targets in Azure IoT Operations Orchestrator.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_IOTOPERATIONSORCHESTRATOR_TARGETS"

smartscapeNodes "AZURE_MICROSOFT_IOTOPERATIONSORCHESTRATOR_TARGETS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE