Try it free

Management & Governance

  • Latest Dynatrace
  • Reference

Contains entity definitions for Azure Management & Governance stored in Smartscape on Grail. Entities are prefixed with AZURE_.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for Azure Management & Governance entity types.

smartscapeNodes "AZURE_MICROSOFT_ADVISOR*"
| append [ smartscapeNodes "AZURE_MICROSOFT_APPCOMPLIANCEAUTOMATION*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_AUTOMANAGE*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_AUTOMATION*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_AZUREBUSINESSCONTINUITY*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_AZURERESILIENCEMANAGEMENT*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_BILLING*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_BILLINGBENEFITS*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_BLUEPRINT*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_CAPACITY*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_CHAOS*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_CLOUDHEALTH*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_CONSUMPTION*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_COSTMANAGEMENT*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_CUSTOMPROVIDERS*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_DASHBOARD*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_DEPENDENCYMAP*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_DISCOVERY*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_EDUCATION*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_GUESTCONFIGURATION*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_HELP*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_IMPACT*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_MANAGEDOPS*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_MANAGEDSERVICES*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_MANAGEMENT*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_MANAGEMENTPARTNER*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_POLICYINSIGHTS*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_PORTAL*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_PORTALSERVICES*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_PROFESSIONALSERVICE*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_PROVIDERHUB*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_QUOTA*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_RECOVERYSERVICES*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_RELATIONSHIPS*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_RESOURCEGRAPH*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_RESOURCEHEALTH*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_RESOURCES*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_SCHEDULER*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_SOFTWAREPLAN*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_SOLUTIONS*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_SOVEREIGN*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_SUBSCRIPTION_*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_SUPPORT*" ]

Permission fields

  • azure.subscription
  • azure.resource.group
  • dt.security_context

ARM deployment

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCES_DEPLOYMENTS

Azure Resource Manager deployment executing a Bicep or ARM template.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCES_DEPLOYMENTS"

smartscapeNodes "AZURE_MICROSOFT_RESOURCES_DEPLOYMENTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Access review history definitions

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_ACCESSREVIEWHISTORYDEFINITIONS

Access review history definitions in Azure RBAC.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_ACCESSREVIEWHISTORYDEFINITIONS"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_ACCESSREVIEWHISTORYDEFINITIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Access review schedule definitions

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_ACCESSREVIEWSCHEDULEDEFINITIONS

Access review schedule definitions in Azure RBAC.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_ACCESSREVIEWSCHEDULEDEFINITIONS"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_ACCESSREVIEWSCHEDULEDEFINITIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Access review schedule settings

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_ACCESSREVIEWSCHEDULESETTINGS

Access review schedule settings in Azure RBAC.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_ACCESSREVIEWSCHEDULESETTINGS"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_ACCESSREVIEWSCHEDULESETTINGS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Accounts

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTOMANAGE_ACCOUNTS

Accounts in Azure Automanage.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTOMANAGE_ACCOUNTS"

smartscapeNodes "AZURE_MICROSOFT_AUTOMANAGE_ACCOUNTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Alerts

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_ALERTS

Alerts within Vaults in Azure Site Recovery / Backup.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_ALERTS"

smartscapeNodes "AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_ALERTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Aliases

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_SUBSCRIPTION_ALIASES

Aliases in Azure Subscriptions.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_SUBSCRIPTION_ALIASES"

smartscapeNodes "AZURE_MICROSOFT_SUBSCRIPTION_ALIASES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Appliance definitions

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_SOLUTIONS_APPLIANCEDEFINITIONS

Appliance definitions in Azure Managed Applications.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_SOLUTIONS_APPLIANCEDEFINITIONS"

smartscapeNodes "AZURE_MICROSOFT_SOLUTIONS_APPLIANCEDEFINITIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Appliances

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_SOLUTIONS_APPLIANCES

Appliances in Azure Managed Applications.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_SOLUTIONS_APPLIANCES"

smartscapeNodes "AZURE_MICROSOFT_SOLUTIONS_APPLIANCES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Application definitions

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_SOLUTIONS_APPLICATIONDEFINITIONS

Application definitions in Azure Managed Applications.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_SOLUTIONS_APPLICATIONDEFINITIONS"

smartscapeNodes "AZURE_MICROSOFT_SOLUTIONS_APPLICATIONDEFINITIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Associations

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_CUSTOMPROVIDERS_ASSOCIATIONS

Associations in Azure Custom Providers.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_CUSTOMPROVIDERS_ASSOCIATIONS"

smartscapeNodes "AZURE_MICROSOFT_CUSTOMPROVIDERS_ASSOCIATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Attestations

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_POLICYINSIGHTS_ATTESTATIONS

Attestations in Azure Policy.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_POLICYINSIGHTS_ATTESTATIONS"

smartscapeNodes "AZURE_MICROSOFT_POLICYINSIGHTS_ATTESTATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Attribute namespaces

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_ATTRIBUTENAMESPACES

Attribute namespaces in Azure RBAC.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_ATTRIBUTENAMESPACES"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_ATTRIBUTENAMESPACES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Automation account

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS

Azure Automation account for runbooks, DSC, and update management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS"

smartscapeNodes "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Automation runbook

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_RUNBOOKS

PowerShell or Python runbook in an Azure Automation account.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_RUNBOOKS"

smartscapeNodes "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_RUNBOOKS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Availability zones

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCES_LOCATIONS_AVAILABILITYZONES

Availability zones within an Azure region.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCES_LOCATIONS_AVAILABILITYZONES"

smartscapeNodes "AZURE_MICROSOFT_RESOURCES_LOCATIONS_AVAILABILITYZONES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure advisor assessment

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_ADVISOR_ASSESSMENTS

Azure Advisor well-architected assessment.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_ADVISOR_ASSESSMENTS"

smartscapeNodes "AZURE_MICROSOFT_ADVISOR_ASSESSMENTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure advisor configuration

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_ADVISOR_CONFIGURATIONS

Configuration settings for Azure Advisor recommendations.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_ADVISOR_CONFIGURATIONS"

smartscapeNodes "AZURE_MICROSOFT_ADVISOR_CONFIGURATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure advisor recommendation

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_ADVISOR_RECOMMENDATIONS

Azure Advisor recommendation.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_ADVISOR_RECOMMENDATIONS"

smartscapeNodes "AZURE_MICROSOFT_ADVISOR_RECOMMENDATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure advisor resiliency review

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_ADVISOR_RESILIENCYREVIEWS

Resiliency review recommendation generated by Azure Advisor.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_ADVISOR_RESILIENCYREVIEWS"

smartscapeNodes "AZURE_MICROSOFT_ADVISOR_RESILIENCYREVIEWS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure advisor score

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_ADVISOR_ADVISORSCORE

Overall Azure Advisor score.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_ADVISOR_ADVISORSCORE"

smartscapeNodes "AZURE_MICROSOFT_ADVISOR_ADVISORSCORE"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure backup protected item

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_BACKUPFABRICS_PROTECTIONCONTAINERS_PROTECTEDITEMS

Workload protected by Azure Backup in a Recovery Services vault.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_BACKUPFABRICS_PROTECTIONCONTAINERS_PROTECTEDITEMS"

smartscapeNodes "AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_BACKUPFABRICS_PROTECTIONCONTAINERS_PROTECTEDITEMS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure locations

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCES_LOCATIONS

Azure region available for resource deployment within a subscription.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCES_LOCATIONS"

smartscapeNodes "AZURE_MICROSOFT_RESOURCES_LOCATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure policy assignment

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_POLICYASSIGNMENTS

Assignment of an Azure policy definition or initiative to a scope.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_POLICYASSIGNMENTS"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_POLICYASSIGNMENTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure policy definition

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_POLICYDEFINITIONS

Custom or built-in policy definition in Azure Policy.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_POLICYDEFINITIONS"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_POLICYDEFINITIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure policy exemption

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_POLICYEXEMPTIONS

Exemption excluding a resource from an Azure policy assignment.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_POLICYEXEMPTIONS"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_POLICYEXEMPTIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure policy initiative

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_POLICYSETDEFINITIONS

Collection of Azure policy definitions grouped as an initiative.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_POLICYSETDEFINITIONS"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_POLICYSETDEFINITIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure resource lock

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_LOCKS

Management lock preventing accidental deletion or modification of a resource.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_LOCKS"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_LOCKS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure resource tag

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCES_TAGS

Tag metadata applied to Azure resources for organisation and cost management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCES_TAGS"

smartscapeNodes "AZURE_MICROSOFT_RESOURCES_TAGS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure subscriptions

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCES_SUBSCRIPTIONS

Azure subscription.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCES_SUBSCRIPTIONS"

smartscapeNodes "AZURE_MICROSOFT_RESOURCES_SUBSCRIPTIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure tenants

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCES_TENANTS

Azure Active Directory tenant associated with an Azure subscription.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCES_TENANTS"

smartscapeNodes "AZURE_MICROSOFT_RESOURCES_TENANTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Backup jobs

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_BACKUPJOBS

Backup jobs within Vaults in Azure Site Recovery / Backup.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_BACKUPJOBS"

smartscapeNodes "AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_BACKUPJOBS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Backup policies

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_BACKUPPOLICIES

Backup policies within Vaults in Azure Site Recovery / Backup.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_BACKUPPOLICIES"

smartscapeNodes "AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_BACKUPPOLICIES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Best practices

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTOMANAGE_BESTPRACTICES

Best practices in Azure Automanage.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTOMANAGE_BESTPRACTICES"

smartscapeNodes "AZURE_MICROSOFT_AUTOMANAGE_BESTPRACTICES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Billing accounts

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BILLING_BILLINGACCOUNTS

Billing accounts in Azure Billing.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BILLING_BILLINGACCOUNTS"

smartscapeNodes "AZURE_MICROSOFT_BILLING_BILLINGACCOUNTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Billing periods

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BILLING_BILLINGPERIODS

Billing periods in Azure Billing.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BILLING_BILLINGPERIODS"

smartscapeNodes "AZURE_MICROSOFT_BILLING_BILLINGPERIODS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Billing property

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BILLING_BILLINGPROPERTY

Billing property in Azure Billing.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BILLING_BILLINGPROPERTY"

smartscapeNodes "AZURE_MICROSOFT_BILLING_BILLINGPROPERTY"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Billing requests

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BILLING_BILLINGREQUESTS

Billing requests in Azure Billing.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BILLING_BILLINGREQUESTS"

smartscapeNodes "AZURE_MICROSOFT_BILLING_BILLINGREQUESTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Billing role assignments

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BILLING_BILLINGROLEASSIGNMENTS

Billing role assignments in Azure Billing.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BILLING_BILLINGROLEASSIGNMENTS"

smartscapeNodes "AZURE_MICROSOFT_BILLING_BILLINGROLEASSIGNMENTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Billing role definitions

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BILLING_BILLINGROLEDEFINITIONS

Billing role definitions in Azure Billing.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BILLING_BILLINGROLEDEFINITIONS"

smartscapeNodes "AZURE_MICROSOFT_BILLING_BILLINGROLEDEFINITIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Blueprint assignments

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BLUEPRINT_BLUEPRINTASSIGNMENTS

Blueprint assignments in Azure Blueprints.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BLUEPRINT_BLUEPRINTASSIGNMENTS"

smartscapeNodes "AZURE_MICROSOFT_BLUEPRINT_BLUEPRINTASSIGNMENTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Blueprints

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BLUEPRINT_BLUEPRINTS

Blueprints in Azure Blueprints.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BLUEPRINT_BLUEPRINTS"

smartscapeNodes "AZURE_MICROSOFT_BLUEPRINT_BLUEPRINTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Bookshelves

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_DISCOVERY_BOOKSHELVES

Bookshelves in Azure Migrate Discovery.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_DISCOVERY_BOOKSHELVES"

smartscapeNodes "AZURE_MICROSOFT_DISCOVERY_BOOKSHELVES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Budgets

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_COSTMANAGEMENT_BUDGETS

Budgets in Azure Cost Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_COSTMANAGEMENT_BUDGETS"

smartscapeNodes "AZURE_MICROSOFT_COSTMANAGEMENT_BUDGETS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Built in template specs

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCES_BUILTINTEMPLATESPECS

Built in template specs in Azure Resource Manager.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCES_BUILTINTEMPLATESPECS"

smartscapeNodes "AZURE_MICROSOFT_RESOURCES_BUILTINTEMPLATESPECS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Certificates

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_CERTIFICATES

Certificates in Azure Automation.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_CERTIFICATES"

smartscapeNodes "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_CERTIFICATES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Change tenant request

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_SUBSCRIPTION_CHANGETENANTREQUEST

Change tenant request in Azure Subscriptions.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_SUBSCRIPTION_CHANGETENANTREQUEST"

smartscapeNodes "AZURE_MICROSOFT_SUBSCRIPTION_CHANGETENANTREQUEST"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Changes

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCES_CHANGES

Changes in Azure Resource Manager.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCES_CHANGES"

smartscapeNodes "AZURE_MICROSOFT_RESOURCES_CHANGES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Chaos studio workspaces

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_CHAOS_WORKSPACES

Chaos studio workspaces in Azure Chaos Studio.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_CHAOS_WORKSPACES"

smartscapeNodes "AZURE_MICROSOFT_CHAOS_WORKSPACES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Cloud connectors

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_COSTMANAGEMENT_CLOUDCONNECTORS

Cloud connectors in Azure Cost Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_COSTMANAGEMENT_CLOUDCONNECTORS"

smartscapeNodes "AZURE_MICROSOFT_COSTMANAGEMENT_CLOUDCONNECTORS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Conditional credits

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BILLINGBENEFITS_CONDITIONALCREDITS

Conditional credits in Azure Billing Benefits.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BILLINGBENEFITS_CONDITIONALCREDITS"

smartscapeNodes "AZURE_MICROSOFT_BILLINGBENEFITS_CONDITIONALCREDITS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Configuration profile assignments

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTOMANAGE_CONFIGURATIONPROFILEASSIGNMENTS

Configuration profile assignments in Azure Automanage.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTOMANAGE_CONFIGURATIONPROFILEASSIGNMENTS"

smartscapeNodes "AZURE_MICROSOFT_AUTOMANAGE_CONFIGURATIONPROFILEASSIGNMENTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Configuration profile preferences

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTOMANAGE_CONFIGURATIONPROFILEPREFERENCES

Configuration profile preferences in Azure Automanage.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTOMANAGE_CONFIGURATIONPROFILEPREFERENCES"

smartscapeNodes "AZURE_MICROSOFT_AUTOMANAGE_CONFIGURATIONPROFILEPREFERENCES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Configuration profiles

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTOMANAGE_CONFIGURATIONPROFILES

Configuration profiles in Azure Automanage.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTOMANAGE_CONFIGURATIONPROFILES"

smartscapeNodes "AZURE_MICROSOFT_AUTOMANAGE_CONFIGURATIONPROFILES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Configurations

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_CONFIGURATIONS

Configurations in Azure Automation.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_CONFIGURATIONS"

smartscapeNodes "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_CONFIGURATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Connections

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_CONNECTIONS

Connections in Azure Automation.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_CONNECTIONS"

smartscapeNodes "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_CONNECTIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Connectors

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_IMPACT_CONNECTORS

Connectors in Azure Impact Reporting.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_IMPACT_CONNECTORS"

smartscapeNodes "AZURE_MICROSOFT_IMPACT_CONNECTORS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Consoles

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_PORTAL_CONSOLES

Consoles in Azure Portal.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_PORTAL_CONSOLES"

smartscapeNodes "AZURE_MICROSOFT_PORTAL_CONSOLES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Copilot settings

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_PORTALSERVICES_COPILOTSETTINGS

Copilot settings in Azure Portal Services.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_PORTALSERVICES_COPILOTSETTINGS"

smartscapeNodes "AZURE_MICROSOFT_PORTALSERVICES_COPILOTSETTINGS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Cost allocation rules

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_COSTMANAGEMENT_COSTALLOCATIONRULES

Cost allocation rules in Azure Cost Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_COSTMANAGEMENT_COSTALLOCATIONRULES"

smartscapeNodes "AZURE_MICROSOFT_COSTMANAGEMENT_COSTALLOCATIONRULES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Credits

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_CONSUMPTION_CREDITS

Credits in Azure Cost Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_CONSUMPTION_CREDITS"

smartscapeNodes "AZURE_MICROSOFT_CONSUMPTION_CREDITS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

DSC node configurations

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_DSCNODECONFIGURATIONS

DSC node configurations within Automation Accounts in Azure Automation.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_DSCNODECONFIGURATIONS"

smartscapeNodes "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_DSCNODECONFIGURATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

DSC nodes

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_DSCNODES

DSC nodes within Automation Accounts in Azure Automation.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_DSCNODES"

smartscapeNodes "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_DSCNODES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Dashboards

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_PORTAL_DASHBOARDS

Dashboards in Azure Portal.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_PORTAL_DASHBOARDS"

smartscapeNodes "AZURE_MICROSOFT_PORTAL_DASHBOARDS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Data boundaries

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCES_DATABOUNDARIES

Data boundaries in Azure Resource Manager.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCES_DATABOUNDARIES"

smartscapeNodes "AZURE_MICROSOFT_RESOURCES_DATABOUNDARIES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Data policy manifests

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_DATAPOLICYMANIFESTS

Data policy manifests in Azure RBAC.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_DATAPOLICYMANIFESTS"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_DATAPOLICYMANIFESTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Deleted vaults

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RECOVERYSERVICES_LOCATIONS_DELETEDVAULTS

Deleted vaults in Azure Recovery Services.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RECOVERYSERVICES_LOCATIONS_DELETEDVAULTS"

smartscapeNodes "AZURE_MICROSOFT_RECOVERYSERVICES_LOCATIONS_DELETEDVAULTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Dependency of

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RELATIONSHIPS_DEPENDENCYOF

Dependency of in Azure Resource Manager.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RELATIONSHIPS_DEPENDENCYOF"

smartscapeNodes "AZURE_MICROSOFT_RELATIONSHIPS_DEPENDENCYOF"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Deployment scripts

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCES_DEPLOYMENTSCRIPTS

Deployment scripts in Azure Resource Manager.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCES_DEPLOYMENTSCRIPTS"

smartscapeNodes "AZURE_MICROSOFT_RESOURCES_DEPLOYMENTSCRIPTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Deployment stacks

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCES_DEPLOYMENTSTACKS

Deployment stacks in Azure Resource Manager.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCES_DEPLOYMENTSTACKS"

smartscapeNodes "AZURE_MICROSOFT_RESOURCES_DEPLOYMENTSTACKS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Deployment stacks what if results

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCES_DEPLOYMENTSTACKSWHATIFRESULTS

Deployment stacks what if results in Azure Resource Manager.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCES_DEPLOYMENTSTACKSWHATIFRESULTS"

smartscapeNodes "AZURE_MICROSOFT_RESOURCES_DEPLOYMENTSTACKSWHATIFRESULTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Diagnostics

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_HELP_DIAGNOSTICS

Diagnostics in Azure Help.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_HELP_DIAGNOSTICS"

smartscapeNodes "AZURE_MICROSOFT_HELP_DIAGNOSTICS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Discounts

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BILLINGBENEFITS_DISCOUNTS

Discounts in Azure Billing Benefits.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BILLINGBENEFITS_DISCOUNTS"

smartscapeNodes "AZURE_MICROSOFT_BILLINGBENEFITS_DISCOUNTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Drills

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AZURERESILIENCEMANAGEMENT_DRILLS

Drills in Azure Resilience Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AZURERESILIENCEMANAGEMENT_DRILLS"

smartscapeNodes "AZURE_MICROSOFT_AZURERESILIENCEMANAGEMENT_DRILLS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Emerging issues

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCEHEALTH_EMERGINGISSUES

Emerging issues in Azure Resource Health.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCEHEALTH_EMERGINGISSUES"

smartscapeNodes "AZURE_MICROSOFT_RESOURCEHEALTH_EMERGINGISSUES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Enrollment accounts

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BILLING_ENROLLMENTACCOUNTS

Enrollment accounts in Azure Billing.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BILLING_ENROLLMENTACCOUNTS"

smartscapeNodes "AZURE_MICROSOFT_BILLING_ENROLLMENTACCOUNTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Events

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCEHEALTH_EVENTS

Events in Azure Resource Health.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCEHEALTH_EVENTS"

smartscapeNodes "AZURE_MICROSOFT_RESOURCEHEALTH_EVENTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Experiments

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_CHAOS_EXPERIMENTS

Experiments in Azure Chaos Studio.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_CHAOS_EXPERIMENTS"

smartscapeNodes "AZURE_MICROSOFT_CHAOS_EXPERIMENTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Exports

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_COSTMANAGEMENT_EXPORTS

Exports in Azure Cost Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_COSTMANAGEMENT_EXPORTS"

smartscapeNodes "AZURE_MICROSOFT_COSTMANAGEMENT_EXPORTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

External billing accounts

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_COSTMANAGEMENT_EXTERNALBILLINGACCOUNTS

External billing accounts in Azure Cost Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_COSTMANAGEMENT_EXTERNALBILLINGACCOUNTS"

smartscapeNodes "AZURE_MICROSOFT_COSTMANAGEMENT_EXTERNALBILLINGACCOUNTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

External subscriptions

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_COSTMANAGEMENT_EXTERNALSUBSCRIPTIONS

External subscriptions in Azure Cost Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_COSTMANAGEMENT_EXTERNALSUBSCRIPTIONS"

smartscapeNodes "AZURE_MICROSOFT_COSTMANAGEMENT_EXTERNALSUBSCRIPTIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Free services

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BILLINGBENEFITS_FREESERVICES

Free services in Azure Billing Benefits.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BILLINGBENEFITS_FREESERVICES"

smartscapeNodes "AZURE_MICROSOFT_BILLINGBENEFITS_FREESERVICES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Goal assignments

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AZURERESILIENCEMANAGEMENT_GOALASSIGNMENTS

Goal assignments in Azure Resilience Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AZURERESILIENCEMANAGEMENT_GOALASSIGNMENTS"

smartscapeNodes "AZURE_MICROSOFT_AZURERESILIENCEMANAGEMENT_GOALASSIGNMENTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Goal templates

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AZURERESILIENCEMANAGEMENT_GOALTEMPLATES

Goal templates in Azure Resilience Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AZURERESILIENCEMANAGEMENT_GOALTEMPLATES"

smartscapeNodes "AZURE_MICROSOFT_AZURERESILIENCEMANAGEMENT_GOALTEMPLATES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Grafana

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_DASHBOARD_GRAFANA

Grafana in Azure Managed Grafana.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_DASHBOARD_GRAFANA"

smartscapeNodes "AZURE_MICROSOFT_DASHBOARD_GRAFANA"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Grants

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_EDUCATION_GRANTS

Grants in Azure Education.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_EDUCATION_GRANTS"

smartscapeNodes "AZURE_MICROSOFT_EDUCATION_GRANTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Group quotas

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_QUOTA_GROUPQUOTAS

Group quotas in Azure Quota.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_QUOTA_GROUPQUOTAS"

smartscapeNodes "AZURE_MICROSOFT_QUOTA_GROUPQUOTAS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Guest configuration assignments

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_GUESTCONFIGURATION_GUESTCONFIGURATIONASSIGNMENTS

Guest configuration assignments in Azure Policy.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_GUESTCONFIGURATION_GUESTCONFIGURATIONASSIGNMENTS"

smartscapeNodes "AZURE_MICROSOFT_GUESTCONFIGURATION_GUESTCONFIGURATIONASSIGNMENTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Health models

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_CLOUDHEALTH_HEALTHMODELS

Health models in Azure Cloud Health.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_CLOUDHEALTH_HEALTHMODELS"

smartscapeNodes "AZURE_MICROSOFT_CLOUDHEALTH_HEALTHMODELS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Hybrid run book workers

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_HYBRIDRUNBOOKWORKERGROUPS_HYBRIDRUNBOOKWORKERS

Hybrid run book workers in Azure Automation.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_HYBRIDRUNBOOKWORKERGROUPS_HYBRIDRUNBOOKWORKERS"

smartscapeNodes "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_HYBRIDRUNBOOKWORKERGROUPS_HYBRIDRUNBOOKWORKERS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Hybrid runbook worker groups

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_HYBRIDRUNBOOKWORKERGROUPS

Group of hybrid runbook workers in Azure Automation.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_HYBRIDRUNBOOKWORKERGROUPS"

smartscapeNodes "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_HYBRIDRUNBOOKWORKERGROUPS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Hybrid use benefits

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_SOFTWAREPLAN_HYBRIDUSEBENEFITS

Hybrid use benefits in Azure Hybrid Benefit.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_SOFTWAREPLAN_HYBRIDUSEBENEFITS"

smartscapeNodes "AZURE_MICROSOFT_SOFTWAREPLAN_HYBRIDUSEBENEFITS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Impact categories

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_IMPACT_IMPACTCATEGORIES

Impact categories in Azure Impact Reporting.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_IMPACT_IMPACTCATEGORIES"

smartscapeNodes "AZURE_MICROSOFT_IMPACT_IMPACTCATEGORIES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Invoices

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BILLING_INVOICES

Invoices in Azure Billing.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BILLING_INVOICES"

smartscapeNodes "AZURE_MICROSOFT_BILLING_INVOICES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

JIT requests

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_SOLUTIONS_JITREQUESTS

JIT requests in Azure Managed Applications.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_SOLUTIONS_JITREQUESTS"

smartscapeNodes "AZURE_MICROSOFT_SOLUTIONS_JITREQUESTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Job collections

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_SCHEDULER_JOBCOLLECTIONS

Job collections in Azure Scheduler.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_SCHEDULER_JOBCOLLECTIONS"

smartscapeNodes "AZURE_MICROSOFT_SCHEDULER_JOBCOLLECTIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Job schedules

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_JOBSCHEDULES

Job schedules within Automation Accounts in Azure Automation.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_JOBSCHEDULES"

smartscapeNodes "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_JOBSCHEDULES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Jobs

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_JOBS

Jobs within Automation Accounts in Azure Automation.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_JOBS"

smartscapeNodes "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_JOBS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Labs

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_EDUCATION_LABS

Labs in Azure Education.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_EDUCATION_LABS"

smartscapeNodes "AZURE_MICROSOFT_EDUCATION_LABS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Landing zone accounts

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_SOVEREIGN_LANDINGZONEACCOUNTS

Landing zone accounts in Azure Sovereign Clouds.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_SOVEREIGN_LANDINGZONEACCOUNTS"

smartscapeNodes "AZURE_MICROSOFT_SOVEREIGN_LANDINGZONEACCOUNTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

MACCs

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BILLINGBENEFITS_MACCS

MACCs (Microsoft Azure Consumption Commitments) in Azure Billing Benefits.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BILLINGBENEFITS_MACCS"

smartscapeNodes "AZURE_MICROSOFT_BILLINGBENEFITS_MACCS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Managed ops

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_MANAGEDOPS_MANAGEDOPS

Managed Operations in Azure Managed Operations.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_MANAGEDOPS_MANAGEDOPS"

smartscapeNodes "AZURE_MICROSOFT_MANAGEDOPS_MANAGEDOPS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Maps

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_DEPENDENCYMAP_MAPS

Maps in Azure Dependency Map.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_DEPENDENCYMAP_MAPS"

smartscapeNodes "AZURE_MICROSOFT_DEPENDENCYMAP_MAPS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Marketplace registration definitions

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_MANAGEDSERVICES_MARKETPLACEREGISTRATIONDEFINITIONS

Marketplace registration definitions in Azure Lighthouse.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_MANAGEDSERVICES_MARKETPLACEREGISTRATIONDEFINITIONS"

smartscapeNodes "AZURE_MICROSOFT_MANAGEDSERVICES_MARKETPLACEREGISTRATIONDEFINITIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Markup rules

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_COSTMANAGEMENT_MARKUPRULES

Markup rules in Azure Cost Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_COSTMANAGEMENT_MARKUPRULES"

smartscapeNodes "AZURE_MICROSOFT_COSTMANAGEMENT_MARKUPRULES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Metadata

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCEHEALTH_METADATA

Metadata in Azure Resource Health.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCEHEALTH_METADATA"

smartscapeNodes "AZURE_MICROSOFT_RESOURCEHEALTH_METADATA"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Partners

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_MANAGEMENTPARTNER_PARTNERS

Partners in Azure Management Partner.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_MANAGEMENTPARTNER_PARTNERS"

smartscapeNodes "AZURE_MICROSOFT_MANAGEMENTPARTNER_PARTNERS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Payment methods

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BILLING_PAYMENTMETHODS

Payment methods in Azure Billing.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BILLING_PAYMENTMETHODS"

smartscapeNodes "AZURE_MICROSOFT_BILLING_PAYMENTMETHODS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Policies

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_SUBSCRIPTION_POLICIES

Policies in Azure Subscriptions.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_SUBSCRIPTION_POLICIES"

smartscapeNodes "AZURE_MICROSOFT_SUBSCRIPTION_POLICIES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Policy enrollments

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_POLICYENROLLMENTS

Policy enrollments in Azure RBAC.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_POLICYENROLLMENTS"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_POLICYENROLLMENTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Policy metadata

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_POLICYINSIGHTS_POLICYMETADATA

Policy metadata in Azure Policy.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_POLICYINSIGHTS_POLICYMETADATA"

smartscapeNodes "AZURE_MICROSOFT_POLICYINSIGHTS_POLICYMETADATA"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Price sheets

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_CONSUMPTION_PRICESHEETS

Price sheets in Azure Cost Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_CONSUMPTION_PRICESHEETS"

smartscapeNodes "AZURE_MICROSOFT_CONSUMPTION_PRICESHEETS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Private accesses

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_CHAOS_PRIVATEACCESSES

Private accesses in Azure Chaos Studio.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_CHAOS_PRIVATEACCESSES"

smartscapeNodes "AZURE_MICROSOFT_CHAOS_PRIVATEACCESSES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Private link associations

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_PRIVATELINKASSOCIATIONS

Private link associations in Azure RBAC.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_PRIVATELINKASSOCIATIONS"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_PRIVATELINKASSOCIATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Promotions

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BILLING_PROMOTIONS

Promotions in Azure Billing.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BILLING_PROMOTIONS"

smartscapeNodes "AZURE_MICROSOFT_BILLING_PROMOTIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Protect able items

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_BACKUPFABRICS_PROTECTIONCONTAINERS_PROTECTABLEITEMS

Protect able items in Azure Recovery Services.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_BACKUPFABRICS_PROTECTIONCONTAINERS_PROTECTABLEITEMS"

smartscapeNodes "AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_BACKUPFABRICS_PROTECTIONCONTAINERS_PROTECTABLEITEMS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Protected items

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RECOVERYSERVICES_LOCATIONS_DELETEDVAULTS_BACKUPFABRICS_PROTECTIONCONTAINERS_PROTECTEDITEMS

Protected items in Azure Recovery Services.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RECOVERYSERVICES_LOCATIONS_DELETEDVAULTS_BACKUPFABRICS_PROTECTIONCONTAINERS_PROTECTEDITEMS"

smartscapeNodes "AZURE_MICROSOFT_RECOVERYSERVICES_LOCATIONS_DELETEDVAULTS_BACKUPFABRICS_PROTECTIONCONTAINERS_PROTECTEDITEMS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Provider monitor settings

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_PROVIDERHUB_PROVIDERMONITORSETTINGS

Provider monitor settings in Azure Provider Hub.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_PROVIDERHUB_PROVIDERMONITORSETTINGS"

smartscapeNodes "AZURE_MICROSOFT_PROVIDERHUB_PROVIDERMONITORSETTINGS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Provider registrations

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_PROVIDERHUB_PROVIDERREGISTRATIONS

Provider registrations in Azure Provider Hub.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_PROVIDERHUB_PROVIDERREGISTRATIONS"

smartscapeNodes "AZURE_MICROSOFT_PROVIDERHUB_PROVIDERREGISTRATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Queries

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCEGRAPH_QUERIES

Queries in Azure Resource Graph.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCEGRAPH_QUERIES"

smartscapeNodes "AZURE_MICROSOFT_RESOURCEGRAPH_QUERIES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Quota requests

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_QUOTA_QUOTAREQUESTS

Quota requests in Azure Quota.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_QUOTA_QUOTAREQUESTS"

smartscapeNodes "AZURE_MICROSOFT_QUOTA_QUOTAREQUESTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

RBAC deny assignment

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_DENYASSIGNMENTS

Azure RBAC deny assignment blocking access regardless of role assignments.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_DENYASSIGNMENTS"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_DENYASSIGNMENTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

RBAC role assignment

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_ROLEASSIGNMENTS

Azure RBAC role assignment granting a principal access to a scope.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_ROLEASSIGNMENTS"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_ROLEASSIGNMENTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

RBAC role definition

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_ROLEDEFINITIONS

Custom or built-in Azure RBAC role definition.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_ROLEDEFINITIONS"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_ROLEDEFINITIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Recovery plans

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AZURERESILIENCEMANAGEMENT_RECOVERYPLANS

Recovery plans in Azure Resilience Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AZURERESILIENCEMANAGEMENT_RECOVERYPLANS"

smartscapeNodes "AZURE_MICROSOFT_AZURERESILIENCEMANAGEMENT_RECOVERYPLANS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Recovery services vault

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS

Azure Recovery Services vault for backup and site recovery.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS"

smartscapeNodes "AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Registration assignments

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_MANAGEDSERVICES_REGISTRATIONASSIGNMENTS

Registration assignments in Azure Lighthouse.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_MANAGEDSERVICES_REGISTRATIONASSIGNMENTS"

smartscapeNodes "AZURE_MICROSOFT_MANAGEDSERVICES_REGISTRATIONASSIGNMENTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Registration definitions

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_MANAGEDSERVICES_REGISTRATIONDEFINITIONS

Registration definitions in Azure Lighthouse.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_MANAGEDSERVICES_REGISTRATIONDEFINITIONS"

smartscapeNodes "AZURE_MICROSOFT_MANAGEDSERVICES_REGISTRATIONDEFINITIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Remediations

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_POLICYINSIGHTS_REMEDIATIONS

Remediations in Azure Policy.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_POLICYINSIGHTS_REMEDIATIONS"

smartscapeNodes "AZURE_MICROSOFT_POLICYINSIGHTS_REMEDIATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Replication eligibility results

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RECOVERYSERVICES_REPLICATIONELIGIBILITYRESULTS

Replication eligibility results in Azure Recovery Services.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RECOVERYSERVICES_REPLICATIONELIGIBILITYRESULTS"

smartscapeNodes "AZURE_MICROSOFT_RECOVERYSERVICES_REPLICATIONELIGIBILITYRESULTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Replication jobs

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_REPLICATIONJOBS

Replication jobs in Azure Recovery Services.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_REPLICATIONJOBS"

smartscapeNodes "AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_REPLICATIONJOBS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Replication policies

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_REPLICATIONPOLICIES

Replication policies in Azure Recovery Services.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_REPLICATIONPOLICIES"

smartscapeNodes "AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_REPLICATIONPOLICIES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Replication protected items

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_REPLICATIONFABRICS_REPLICATIONPROTECTIONCONTAINERS_REPLICATIONPROTECTEDITEMS

Replication protected items in Azure Recovery Services.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_REPLICATIONFABRICS_REPLICATIONPROTECTIONCONTAINERS_REPLICATIONPROTECTEDITEMS"

smartscapeNodes "AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_REPLICATIONFABRICS_REPLICATIONPROTECTIONCONTAINERS_REPLICATIONPROTECTEDITEMS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Replication recovery plans

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_REPLICATIONRECOVERYPLANS

Replication recovery plans in Azure Recovery Services.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_REPLICATIONRECOVERYPLANS"

smartscapeNodes "AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_REPLICATIONRECOVERYPLANS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Report configs

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_COSTMANAGEMENT_REPORTCONFIGS

Report configs in Azure Cost Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_COSTMANAGEMENT_REPORTCONFIGS"

smartscapeNodes "AZURE_MICROSOFT_COSTMANAGEMENT_REPORTCONFIGS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Reports

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_COSTMANAGEMENT_REPORTS

Reports in Azure Cost Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_COSTMANAGEMENT_REPORTS"

smartscapeNodes "AZURE_MICROSOFT_COSTMANAGEMENT_REPORTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Reservation order aliases

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BILLINGBENEFITS_RESERVATIONORDERALIASES

Reservation order aliases in Azure Billing Benefits.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BILLINGBENEFITS_RESERVATIONORDERALIASES"

smartscapeNodes "AZURE_MICROSOFT_BILLINGBENEFITS_RESERVATIONORDERALIASES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Reservation orders

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_CAPACITY_RESERVATIONORDERS

Reservation orders in Azure Capacity Reservations.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_CAPACITY_RESERVATIONORDERS"

smartscapeNodes "AZURE_MICROSOFT_CAPACITY_RESERVATIONORDERS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Resource management private links

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_RESOURCEMANAGEMENTPRIVATELINKS

Resource management private links in Azure RBAC.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_RESOURCEMANAGEMENTPRIVATELINKS"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_RESOURCEMANAGEMENTPRIVATELINKS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Resources

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_PROFESSIONALSERVICE_RESOURCES

Resources in Azure Marketplace.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_PROFESSIONALSERVICE_RESOURCES"

smartscapeNodes "AZURE_MICROSOFT_PROFESSIONALSERVICE_RESOURCES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Role assignment approvals

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_ROLEASSIGNMENTAPPROVALS

Role assignment approvals in Azure RBAC.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_ROLEASSIGNMENTAPPROVALS"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_ROLEASSIGNMENTAPPROVALS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Role assignment schedule instances

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_ROLEASSIGNMENTSCHEDULEINSTANCES

Role assignment schedule instances in Azure RBAC.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_ROLEASSIGNMENTSCHEDULEINSTANCES"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_ROLEASSIGNMENTSCHEDULEINSTANCES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Role assignment schedule requests

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_ROLEASSIGNMENTSCHEDULEREQUESTS

Role assignment schedule requests in Azure RBAC.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_ROLEASSIGNMENTSCHEDULEREQUESTS"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_ROLEASSIGNMENTSCHEDULEREQUESTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Role assignment schedules

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_ROLEASSIGNMENTSCHEDULES

Role assignment schedules in Azure RBAC.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_ROLEASSIGNMENTSCHEDULES"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_ROLEASSIGNMENTSCHEDULES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Role eligibility schedule instances

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_ROLEELIGIBILITYSCHEDULEINSTANCES

Role eligibility schedule instances in Azure RBAC.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_ROLEELIGIBILITYSCHEDULEINSTANCES"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_ROLEELIGIBILITYSCHEDULEINSTANCES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Role eligibility schedule requests

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_ROLEELIGIBILITYSCHEDULEREQUESTS

Role eligibility schedule requests in Azure RBAC.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_ROLEELIGIBILITYSCHEDULEREQUESTS"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_ROLEELIGIBILITYSCHEDULEREQUESTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Role eligibility schedules

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_ROLEELIGIBILITYSCHEDULES

Role eligibility schedules in Azure RBAC.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_ROLEELIGIBILITYSCHEDULES"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_ROLEELIGIBILITYSCHEDULES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Role management alert configurations

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_ROLEMANAGEMENTALERTCONFIGURATIONS

Role management alert configurations in Azure RBAC.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_ROLEMANAGEMENTALERTCONFIGURATIONS"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_ROLEMANAGEMENTALERTCONFIGURATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Role management alert definitions

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_ROLEMANAGEMENTALERTDEFINITIONS

Role management alert definitions in Azure RBAC.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_ROLEMANAGEMENTALERTDEFINITIONS"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_ROLEMANAGEMENTALERTDEFINITIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Role management alerts

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_ROLEMANAGEMENTALERTS

Role management alerts in Azure RBAC.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_ROLEMANAGEMENTALERTS"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_ROLEMANAGEMENTALERTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Role management policies

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_ROLEMANAGEMENTPOLICIES

Role management policies in Azure RBAC.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_ROLEMANAGEMENTPOLICIES"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_ROLEMANAGEMENTPOLICIES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Role management policy assignments

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_ROLEMANAGEMENTPOLICYASSIGNMENTS

Role management policy assignments in Azure RBAC.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_ROLEMANAGEMENTPOLICYASSIGNMENTS"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_ROLEMANAGEMENTPOLICYASSIGNMENTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Savings plan order aliases

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BILLINGBENEFITS_SAVINGSPLANORDERALIASES

Savings plan order aliases in Azure Billing Benefits.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BILLINGBENEFITS_SAVINGSPLANORDERALIASES"

smartscapeNodes "AZURE_MICROSOFT_BILLINGBENEFITS_SAVINGSPLANORDERALIASES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Savings plan orders

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BILLINGBENEFITS_SAVINGSPLANORDERS

Savings plan orders in Azure Billing Benefits.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BILLINGBENEFITS_SAVINGSPLANORDERS"

smartscapeNodes "AZURE_MICROSOFT_BILLINGBENEFITS_SAVINGSPLANORDERS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Scheduled actions

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_COSTMANAGEMENT_SCHEDULEDACTIONS

Scheduled actions in Azure Cost Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_COSTMANAGEMENT_SCHEDULEDACTIONS"

smartscapeNodes "AZURE_MICROSOFT_COSTMANAGEMENT_SCHEDULEDACTIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Self help

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_HELP_SELFHELP

Self help in Azure Help.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_HELP_SELFHELP"

smartscapeNodes "AZURE_MICROSOFT_HELP_SELFHELP"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Service group member

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RELATIONSHIPS_SERVICEGROUPMEMBER

Service group member in Azure Resource Manager.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RELATIONSHIPS_SERVICEGROUPMEMBER"

smartscapeNodes "AZURE_MICROSOFT_RELATIONSHIPS_SERVICEGROUPMEMBER"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Service groups

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_MANAGEMENT_SERVICEGROUPS

Service groups in Azure Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_MANAGEMENT_SERVICEGROUPS"

smartscapeNodes "AZURE_MICROSOFT_MANAGEMENT_SERVICEGROUPS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Service principals

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTOMANAGE_SERVICEPRINCIPALS

Service principals in Azure Automanage.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTOMANAGE_SERVICEPRINCIPALS"

smartscapeNodes "AZURE_MICROSOFT_AUTOMANAGE_SERVICEPRINCIPALS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Services

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_SUPPORT_SERVICES

Services in Azure Support.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_SUPPORT_SERVICES"

smartscapeNodes "AZURE_MICROSOFT_SUPPORT_SERVICES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Settings

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_COSTMANAGEMENT_SETTINGS

Settings in Azure Cost Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_COSTMANAGEMENT_SETTINGS"

smartscapeNodes "AZURE_MICROSOFT_COSTMANAGEMENT_SETTINGS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Show back rules

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_COSTMANAGEMENT_SHOWBACKRULES

Show back rules in Azure Cost Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_COSTMANAGEMENT_SHOWBACKRULES"

smartscapeNodes "AZURE_MICROSOFT_COSTMANAGEMENT_SHOWBACKRULES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Simplified solutions

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_HELP_SIMPLIFIEDSOLUTIONS

Simplified solutions in Azure Help.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_HELP_SIMPLIFIEDSOLUTIONS"

smartscapeNodes "AZURE_MICROSOFT_HELP_SIMPLIFIEDSOLUTIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Snapshots

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCES_SNAPSHOTS

Snapshots in Azure Resource Manager.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCES_SNAPSHOTS"

smartscapeNodes "AZURE_MICROSOFT_RESOURCES_SNAPSHOTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Solutions

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_HELP_SOLUTIONS

Solutions in Azure Help.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_HELP_SOLUTIONS"

smartscapeNodes "AZURE_MICROSOFT_HELP_SOLUTIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Source controls

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_SOURCECONTROLS

Source controls within Automation Accounts in Azure Automation.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_SOURCECONTROLS"

smartscapeNodes "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_SOURCECONTROLS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Storage containers

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_DISCOVERY_STORAGECONTAINERS

Storage containers in Azure Migrate Discovery.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_DISCOVERY_STORAGECONTAINERS"

smartscapeNodes "AZURE_MICROSOFT_DISCOVERY_STORAGECONTAINERS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Storage discovery workspaces

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_DISCOVERY_WORKSPACES

Storage discovery workspaces in Azure Storage Discovery.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_DISCOVERY_WORKSPACES"

smartscapeNodes "AZURE_MICROSOFT_DISCOVERY_WORKSPACES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Student labs

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_EDUCATION_STUDENTLABS

Student labs in Azure Education.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_EDUCATION_STUDENTLABS"

smartscapeNodes "AZURE_MICROSOFT_EDUCATION_STUDENTLABS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Subscription definitions

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_SUBSCRIPTION_SUBSCRIPTIONDEFINITIONS

Subscription definitions in Azure Subscriptions.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_SUBSCRIPTION_SUBSCRIPTIONDEFINITIONS"

smartscapeNodes "AZURE_MICROSOFT_SUBSCRIPTION_SUBSCRIPTIONDEFINITIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Subscription operations

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_SUBSCRIPTION_SUBSCRIPTIONOPERATIONS

Subscription operations in Azure Subscriptions.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_SUBSCRIPTION_SUBSCRIPTIONOPERATIONS"

smartscapeNodes "AZURE_MICROSOFT_SUBSCRIPTION_SUBSCRIPTIONOPERATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Supercomputers

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_DISCOVERY_SUPERCOMPUTERS

Supercomputers in Azure Migrate Discovery.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_DISCOVERY_SUPERCOMPUTERS"

smartscapeNodes "AZURE_MICROSOFT_DISCOVERY_SUPERCOMPUTERS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Support file workspaces

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_SUPPORT_FILEWORKSPACES

File workspaces for uploading diagnostic files in Azure Support.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_SUPPORT_FILEWORKSPACES"

smartscapeNodes "AZURE_MICROSOFT_SUPPORT_FILEWORKSPACES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Support tickets

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_SUPPORT_SUPPORTTICKETS

Support tickets in Azure Support.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_SUPPORT_SUPPORTTICKETS"

smartscapeNodes "AZURE_MICROSOFT_SUPPORT_SUPPORTTICKETS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Targets

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_CHAOS_TARGETS

Targets in Azure Chaos Studio.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_CHAOS_TARGETS"

smartscapeNodes "AZURE_MICROSOFT_CHAOS_TARGETS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Template specs

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCES_TEMPLATESPECS

Template specs in Azure Resource Manager.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCES_TEMPLATESPECS"

smartscapeNodes "AZURE_MICROSOFT_RESOURCES_TEMPLATESPECS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Tenant configurations

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_PORTAL_TENANTCONFIGURATIONS

Tenant configurations in Azure Portal.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_PORTAL_TENANTCONFIGURATIONS"

smartscapeNodes "AZURE_MICROSOFT_PORTAL_TENANTCONFIGURATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Tools

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_DISCOVERY_TOOLS

Tools in Azure Migrate Discovery.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_DISCOVERY_TOOLS"

smartscapeNodes "AZURE_MICROSOFT_DISCOVERY_TOOLS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Transfers

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BILLING_TRANSFERS

Transfers in Azure Billing.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BILLING_TRANSFERS"

smartscapeNodes "AZURE_MICROSOFT_BILLING_TRANSFERS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Triage recommendations

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_ADVISOR_TRIAGERECOMMENDATIONS

Triage recommendations in Azure Advisor.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_ADVISOR_TRIAGERECOMMENDATIONS"

smartscapeNodes "AZURE_MICROSOFT_ADVISOR_TRIAGERECOMMENDATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Triage resources

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_ADVISOR_TRIAGERESOURCES

Triage state for grouping and actioning recommendations in Azure Advisor.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_ADVISOR_TRIAGERESOURCES"

smartscapeNodes "AZURE_MICROSOFT_ADVISOR_TRIAGERESOURCES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Troubleshooters

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_HELP_TROUBLESHOOTERS

Troubleshooters in Azure Help.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_HELP_TROUBLESHOOTERS"

smartscapeNodes "AZURE_MICROSOFT_HELP_TROUBLESHOOTERS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Unified resilience items

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AZURERESILIENCEMANAGEMENT_UNIFIEDRESILIENCEITEMS

Unified resilience items in Azure Resilience Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AZURERESILIENCEMANAGEMENT_UNIFIEDRESILIENCEITEMS"

smartscapeNodes "AZURE_MICROSOFT_AZURERESILIENCEMANAGEMENT_UNIFIEDRESILIENCEITEMS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Usage plans

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AZURERESILIENCEMANAGEMENT_USAGEPLANS

Usage plans in Azure Resilience Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AZURERESILIENCEMANAGEMENT_USAGEPLANS"

smartscapeNodes "AZURE_MICROSOFT_AZURERESILIENCEMANAGEMENT_USAGEPLANS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

User settings

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_PORTAL_USERSETTINGS

User settings in Azure Portal.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_PORTAL_USERSETTINGS"

smartscapeNodes "AZURE_MICROSOFT_PORTAL_USERSETTINGS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Variables

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_VARIABLES

Variables in Azure RBAC.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_VARIABLES"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_VARIABLES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Views

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_COSTMANAGEMENT_VIEWS

Views in Azure Cost Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_COSTMANAGEMENT_VIEWS"

smartscapeNodes "AZURE_MICROSOFT_COSTMANAGEMENT_VIEWS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Watchers

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_WATCHERS

Watchers within Automation Accounts in Azure Automation.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_WATCHERS"

smartscapeNodes "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_WATCHERS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Workload impacts

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_IMPACT_WORKLOADIMPACTS

Workload impacts in Azure Impact Reporting.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_IMPACT_WORKLOADIMPACTS"

smartscapeNodes "AZURE_MICROSOFT_IMPACT_WORKLOADIMPACTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE