Try it free

Management & Governance

  • Latest Dynatrace
  • Reference

Contains entity definitions for Azure Management & Governance stored in Smartscape on Grail. Entities are prefixed with AZURE_.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for Azure Management & Governance entity types.

smartscapeNodes "AZURE_MICROSOFT_ADVISOR*"
| append [ smartscapeNodes "AZURE_MICROSOFT_APPCOMPLIANCEAUTOMATION*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_AUTOMANAGE*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_AUTOMATION*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_AZUREBUSINESSCONTINUITY*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_AZURERESILIENCEMANAGEMENT*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_BILLING*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_BILLINGBENEFITS*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_BLUEPRINT*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_CAPACITY*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_CHAOS*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_CLOUDHEALTH*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_CONSUMPTION*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_COSTMANAGEMENT*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_CUSTOMPROVIDERS*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_DASHBOARD*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_DEPENDENCYMAP*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_DISCOVERY*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_EDUCATION*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_GUESTCONFIGURATION*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_HELP*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_IMPACT*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_MANAGEDOPS*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_MANAGEDSERVICES*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_MANAGEMENT*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_MANAGEMENTPARTNER*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_POLICYINSIGHTS*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_PORTAL*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_PORTALSERVICES*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_PROFESSIONALSERVICE*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_PROVIDERHUB*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_QUOTA*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_RECOVERYSERVICES*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_RELATIONSHIPS*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_RESOURCEGRAPH*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_RESOURCEHEALTH*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_RESOURCES*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_SCHEDULER*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_SOFTWAREPLAN*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_SOLUTIONS*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_SOVEREIGN*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_SUBSCRIPTION_*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_SUPPORT*" ]

Permission fields

  • azure.subscription
  • azure.resource.group
  • dt.security_context

ARM deployment

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCES_DEPLOYMENTS

Azure Resource Manager deployment executing a Bicep or ARM template.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCES_DEPLOYMENTS"

smartscapeNodes "AZURE_MICROSOFT_RESOURCES_DEPLOYMENTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Access review history definitions

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_ACCESSREVIEWHISTORYDEFINITIONS

Access review history definitions in Azure RBAC.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_ACCESSREVIEWHISTORYDEFINITIONS"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_ACCESSREVIEWHISTORYDEFINITIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Access review schedule definitions

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_ACCESSREVIEWSCHEDULEDEFINITIONS

Access review schedule definitions in Azure RBAC.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_ACCESSREVIEWSCHEDULEDEFINITIONS"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_ACCESSREVIEWSCHEDULEDEFINITIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Access review schedule settings

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_ACCESSREVIEWSCHEDULESETTINGS

Access review schedule settings in Azure RBAC.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_ACCESSREVIEWSCHEDULESETTINGS"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_ACCESSREVIEWSCHEDULESETTINGS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Accounts

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTOMANAGE_ACCOUNTS

Accounts in Azure Automanage.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTOMANAGE_ACCOUNTS"

smartscapeNodes "AZURE_MICROSOFT_AUTOMANAGE_ACCOUNTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Alerts

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_ALERTS

Alerts within Vaults in Azure Site Recovery / Backup.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_ALERTS"

smartscapeNodes "AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_ALERTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Aliases

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_SUBSCRIPTION_ALIASES

Aliases in Azure Subscriptions.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_SUBSCRIPTION_ALIASES"

smartscapeNodes "AZURE_MICROSOFT_SUBSCRIPTION_ALIASES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Appliance definitions

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_SOLUTIONS_APPLIANCEDEFINITIONS

Appliance definitions in Azure Managed Applications.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_SOLUTIONS_APPLIANCEDEFINITIONS"

smartscapeNodes "AZURE_MICROSOFT_SOLUTIONS_APPLIANCEDEFINITIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Appliances

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_SOLUTIONS_APPLIANCES

Appliances in Azure Managed Applications.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_SOLUTIONS_APPLIANCES"

smartscapeNodes "AZURE_MICROSOFT_SOLUTIONS_APPLIANCES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Application definitions

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_SOLUTIONS_APPLICATIONDEFINITIONS

Application definitions in Azure Managed Applications.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_SOLUTIONS_APPLICATIONDEFINITIONS"

smartscapeNodes "AZURE_MICROSOFT_SOLUTIONS_APPLICATIONDEFINITIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Associations

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_CUSTOMPROVIDERS_ASSOCIATIONS

Associations in Azure Custom Providers.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_CUSTOMPROVIDERS_ASSOCIATIONS"

smartscapeNodes "AZURE_MICROSOFT_CUSTOMPROVIDERS_ASSOCIATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Attestations

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_POLICYINSIGHTS_ATTESTATIONS

Attestations in Azure Policy.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_POLICYINSIGHTS_ATTESTATIONS"

smartscapeNodes "AZURE_MICROSOFT_POLICYINSIGHTS_ATTESTATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Attribute namespaces

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_ATTRIBUTENAMESPACES

Attribute namespaces in Azure RBAC.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_ATTRIBUTENAMESPACES"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_ATTRIBUTENAMESPACES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Automation account

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS

Azure Automation account for runbooks, DSC, and update management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS"

smartscapeNodes "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Automation runbook

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_RUNBOOKS

PowerShell or Python runbook in an Azure Automation account.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_RUNBOOKS"

smartscapeNodes "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_RUNBOOKS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Availability zones

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCES_LOCATIONS_AVAILABILITYZONES

Availability zones within an Azure region.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCES_LOCATIONS_AVAILABILITYZONES"

smartscapeNodes "AZURE_MICROSOFT_RESOURCES_LOCATIONS_AVAILABILITYZONES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure advisor assessment

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_ADVISOR_ASSESSMENTS

Azure Advisor well-architected assessment.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_ADVISOR_ASSESSMENTS"

smartscapeNodes "AZURE_MICROSOFT_ADVISOR_ASSESSMENTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure advisor configuration

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_ADVISOR_CONFIGURATIONS

Configuration settings for Azure Advisor recommendations.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_ADVISOR_CONFIGURATIONS"

smartscapeNodes "AZURE_MICROSOFT_ADVISOR_CONFIGURATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure advisor recommendation

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_ADVISOR_RECOMMENDATIONS

Azure Advisor recommendation.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_ADVISOR_RECOMMENDATIONS"

smartscapeNodes "AZURE_MICROSOFT_ADVISOR_RECOMMENDATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure advisor resiliency review

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_ADVISOR_RESILIENCYREVIEWS

Resiliency review recommendation generated by Azure Advisor.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_ADVISOR_RESILIENCYREVIEWS"

smartscapeNodes "AZURE_MICROSOFT_ADVISOR_RESILIENCYREVIEWS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure advisor score

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_ADVISOR_ADVISORSCORE

Overall Azure Advisor score.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_ADVISOR_ADVISORSCORE"

smartscapeNodes "AZURE_MICROSOFT_ADVISOR_ADVISORSCORE"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure backup protected item

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_BACKUPFABRICS_PROTECTIONCONTAINERS_PROTECTEDITEMS

Workload protected by Azure Backup in a Recovery Services vault.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_BACKUPFABRICS_PROTECTIONCONTAINERS_PROTECTEDITEMS"

smartscapeNodes "AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_BACKUPFABRICS_PROTECTIONCONTAINERS_PROTECTEDITEMS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure locations

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCES_LOCATIONS

Azure region available for resource deployment within a subscription.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCES_LOCATIONS"

smartscapeNodes "AZURE_MICROSOFT_RESOURCES_LOCATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure policy assignment

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_POLICYASSIGNMENTS

Assignment of an Azure policy definition or initiative to a scope.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_POLICYASSIGNMENTS"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_POLICYASSIGNMENTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure policy definition

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_POLICYDEFINITIONS

Custom or built-in policy definition in Azure Policy.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_POLICYDEFINITIONS"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_POLICYDEFINITIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure policy exemption

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_POLICYEXEMPTIONS

Exemption excluding a resource from an Azure policy assignment.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_POLICYEXEMPTIONS"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_POLICYEXEMPTIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure policy initiative

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_POLICYSETDEFINITIONS

Collection of Azure policy definitions grouped as an initiative.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_POLICYSETDEFINITIONS"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_POLICYSETDEFINITIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure resource lock

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_LOCKS

Management lock preventing accidental deletion or modification of a resource.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_LOCKS"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_LOCKS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure resource tag

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCES_TAGS

Tag metadata applied to Azure resources for organisation and cost management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCES_TAGS"

smartscapeNodes "AZURE_MICROSOFT_RESOURCES_TAGS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure subscriptions

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCES_SUBSCRIPTIONS

Azure subscription.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCES_SUBSCRIPTIONS"

smartscapeNodes "AZURE_MICROSOFT_RESOURCES_SUBSCRIPTIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure tenants

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCES_TENANTS

Azure Active Directory tenant associated with an Azure subscription.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCES_TENANTS"

smartscapeNodes "AZURE_MICROSOFT_RESOURCES_TENANTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Backup jobs

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_BACKUPJOBS

Backup jobs within Vaults in Azure Site Recovery / Backup.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_BACKUPJOBS"

smartscapeNodes "AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_BACKUPJOBS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Backup policies

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_BACKUPPOLICIES

Backup policies within Vaults in Azure Site Recovery / Backup.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_BACKUPPOLICIES"

smartscapeNodes "AZURE_MICROSOFT_RECOVERYSERVICES_VAULTS_BACKUPPOLICIES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Best practices

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTOMANAGE_BESTPRACTICES

Best practices in Azure Automanage.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTOMANAGE_BESTPRACTICES"

smartscapeNodes "AZURE_MICROSOFT_AUTOMANAGE_BESTPRACTICES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Billing accounts

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BILLING_BILLINGACCOUNTS

Billing accounts in Azure Billing.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BILLING_BILLINGACCOUNTS"

smartscapeNodes "AZURE_MICROSOFT_BILLING_BILLINGACCOUNTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Billing periods

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BILLING_BILLINGPERIODS

Billing periods in Azure Billing.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BILLING_BILLINGPERIODS"

smartscapeNodes "AZURE_MICROSOFT_BILLING_BILLINGPERIODS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Billing property

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BILLING_BILLINGPROPERTY

Billing property in Azure Billing.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BILLING_BILLINGPROPERTY"

smartscapeNodes "AZURE_MICROSOFT_BILLING_BILLINGPROPERTY"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Billing requests

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BILLING_BILLINGREQUESTS

Billing requests in Azure Billing.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BILLING_BILLINGREQUESTS"

smartscapeNodes "AZURE_MICROSOFT_BILLING_BILLINGREQUESTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Billing role assignments

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BILLING_BILLINGROLEASSIGNMENTS

Billing role assignments in Azure Billing.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BILLING_BILLINGROLEASSIGNMENTS"

smartscapeNodes "AZURE_MICROSOFT_BILLING_BILLINGROLEASSIGNMENTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Billing role definitions

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BILLING_BILLINGROLEDEFINITIONS

Billing role definitions in Azure Billing.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BILLING_BILLINGROLEDEFINITIONS"

smartscapeNodes "AZURE_MICROSOFT_BILLING_BILLINGROLEDEFINITIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Blueprint assignments

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BLUEPRINT_BLUEPRINTASSIGNMENTS

Blueprint assignments in Azure Blueprints.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BLUEPRINT_BLUEPRINTASSIGNMENTS"

smartscapeNodes "AZURE_MICROSOFT_BLUEPRINT_BLUEPRINTASSIGNMENTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Blueprints

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BLUEPRINT_BLUEPRINTS

Blueprints in Azure Blueprints.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BLUEPRINT_BLUEPRINTS"

smartscapeNodes "AZURE_MICROSOFT_BLUEPRINT_BLUEPRINTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Bookshelves

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_DISCOVERY_BOOKSHELVES

Bookshelves in Azure Migrate Discovery.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_DISCOVERY_BOOKSHELVES"

smartscapeNodes "AZURE_MICROSOFT_DISCOVERY_BOOKSHELVES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Budgets

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_COSTMANAGEMENT_BUDGETS

Budgets in Azure Cost Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_COSTMANAGEMENT_BUDGETS"

smartscapeNodes "AZURE_MICROSOFT_COSTMANAGEMENT_BUDGETS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Built in template specs

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCES_BUILTINTEMPLATESPECS

Built in template specs in Azure Resource Manager.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCES_BUILTINTEMPLATESPECS"

smartscapeNodes "AZURE_MICROSOFT_RESOURCES_BUILTINTEMPLATESPECS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Certificates

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_CERTIFICATES

Certificates in Azure Automation.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_CERTIFICATES"

smartscapeNodes "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_CERTIFICATES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Change tenant request

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_SUBSCRIPTION_CHANGETENANTREQUEST

Change tenant request in Azure Subscriptions.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_SUBSCRIPTION_CHANGETENANTREQUEST"

smartscapeNodes "AZURE_MICROSOFT_SUBSCRIPTION_CHANGETENANTREQUEST"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Changes

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCES_CHANGES

Changes in Azure Resource Manager.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCES_CHANGES"

smartscapeNodes "AZURE_MICROSOFT_RESOURCES_CHANGES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Chaos studio workspaces

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_CHAOS_WORKSPACES

Chaos studio workspaces in Azure Chaos Studio.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_CHAOS_WORKSPACES"

smartscapeNodes "AZURE_MICROSOFT_CHAOS_WORKSPACES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Cloud connectors

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_COSTMANAGEMENT_CLOUDCONNECTORS

Cloud connectors in Azure Cost Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_COSTMANAGEMENT_CLOUDCONNECTORS"

smartscapeNodes "AZURE_MICROSOFT_COSTMANAGEMENT_CLOUDCONNECTORS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Conditional credits

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BILLINGBENEFITS_CONDITIONALCREDITS

Conditional credits in Azure Billing Benefits.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BILLINGBENEFITS_CONDITIONALCREDITS"

smartscapeNodes "AZURE_MICROSOFT_BILLINGBENEFITS_CONDITIONALCREDITS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Configuration profile assignments

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTOMANAGE_CONFIGURATIONPROFILEASSIGNMENTS

Configuration profile assignments in Azure Automanage.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTOMANAGE_CONFIGURATIONPROFILEASSIGNMENTS"

smartscapeNodes "AZURE_MICROSOFT_AUTOMANAGE_CONFIGURATIONPROFILEASSIGNMENTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Configuration profile preferences

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTOMANAGE_CONFIGURATIONPROFILEPREFERENCES

Configuration profile preferences in Azure Automanage.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTOMANAGE_CONFIGURATIONPROFILEPREFERENCES"

smartscapeNodes "AZURE_MICROSOFT_AUTOMANAGE_CONFIGURATIONPROFILEPREFERENCES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Configuration profiles

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTOMANAGE_CONFIGURATIONPROFILES

Configuration profiles in Azure Automanage.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTOMANAGE_CONFIGURATIONPROFILES"

smartscapeNodes "AZURE_MICROSOFT_AUTOMANAGE_CONFIGURATIONPROFILES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Configurations

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_CONFIGURATIONS

Configurations in Azure Automation.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_CONFIGURATIONS"

smartscapeNodes "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_CONFIGURATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Connections

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_CONNECTIONS

Connections in Azure Automation.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_CONNECTIONS"

smartscapeNodes "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_CONNECTIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Connectors

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_IMPACT_CONNECTORS

Connectors in Azure Impact Reporting.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_IMPACT_CONNECTORS"

smartscapeNodes "AZURE_MICROSOFT_IMPACT_CONNECTORS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Consoles

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_PORTAL_CONSOLES

Consoles in Azure Portal.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_PORTAL_CONSOLES"

smartscapeNodes "AZURE_MICROSOFT_PORTAL_CONSOLES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Copilot settings

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_PORTALSERVICES_COPILOTSETTINGS

Copilot settings in Azure Portal Services.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_PORTALSERVICES_COPILOTSETTINGS"

smartscapeNodes "AZURE_MICROSOFT_PORTALSERVICES_COPILOTSETTINGS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Cost allocation rules

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_COSTMANAGEMENT_COSTALLOCATIONRULES

Cost allocation rules in Azure Cost Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_COSTMANAGEMENT_COSTALLOCATIONRULES"

smartscapeNodes "AZURE_MICROSOFT_COSTMANAGEMENT_COSTALLOCATIONRULES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Credits

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_CONSUMPTION_CREDITS

Credits in Azure Cost Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_CONSUMPTION_CREDITS"

smartscapeNodes "AZURE_MICROSOFT_CONSUMPTION_CREDITS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

DSC node configurations

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_DSCNODECONFIGURATIONS

DSC node configurations within Automation Accounts in Azure Automation.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_DSCNODECONFIGURATIONS"

smartscapeNodes "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_DSCNODECONFIGURATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

DSC nodes

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_DSCNODES

DSC nodes within Automation Accounts in Azure Automation.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_DSCNODES"

smartscapeNodes "AZURE_MICROSOFT_AUTOMATION_AUTOMATIONACCOUNTS_DSCNODES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Dashboards

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_PORTAL_DASHBOARDS

Dashboards in Azure Portal.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_PORTAL_DASHBOARDS"

smartscapeNodes "AZURE_MICROSOFT_PORTAL_DASHBOARDS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Data boundaries

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCES_DATABOUNDARIES

Data boundaries in Azure Resource Manager.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCES_DATABOUNDARIES"

smartscapeNodes "AZURE_MICROSOFT_RESOURCES_DATABOUNDARIES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Data policy manifests

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AUTHORIZATION_DATAPOLICYMANIFESTS

Data policy manifests in Azure RBAC.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AUTHORIZATION_DATAPOLICYMANIFESTS"

smartscapeNodes "AZURE_MICROSOFT_AUTHORIZATION_DATAPOLICYMANIFESTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Deleted vaults

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RECOVERYSERVICES_LOCATIONS_DELETEDVAULTS

Deleted vaults in Azure Recovery Services.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RECOVERYSERVICES_LOCATIONS_DELETEDVAULTS"

smartscapeNodes "AZURE_MICROSOFT_RECOVERYSERVICES_LOCATIONS_DELETEDVAULTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Dependency of

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RELATIONSHIPS_DEPENDENCYOF

Dependency of in Azure Resource Manager.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RELATIONSHIPS_DEPENDENCYOF"

smartscapeNodes "AZURE_MICROSOFT_RELATIONSHIPS_DEPENDENCYOF"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Deployment scripts

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCES_DEPLOYMENTSCRIPTS

Deployment scripts in Azure Resource Manager.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCES_DEPLOYMENTSCRIPTS"

smartscapeNodes "AZURE_MICROSOFT_RESOURCES_DEPLOYMENTSCRIPTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Deployment stacks

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCES_DEPLOYMENTSTACKS

Deployment stacks in Azure Resource Manager.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCES_DEPLOYMENTSTACKS"

smartscapeNodes "AZURE_MICROSOFT_RESOURCES_DEPLOYMENTSTACKS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Deployment stacks what if results

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCES_DEPLOYMENTSTACKSWHATIFRESULTS

Deployment stacks what if results in Azure Resource Manager.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCES_DEPLOYMENTSTACKSWHATIFRESULTS"

smartscapeNodes "AZURE_MICROSOFT_RESOURCES_DEPLOYMENTSTACKSWHATIFRESULTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Diagnostics

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_HELP_DIAGNOSTICS

Diagnostics in Azure Help.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_HELP_DIAGNOSTICS"

smartscapeNodes "AZURE_MICROSOFT_HELP_DIAGNOSTICS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Discounts

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BILLINGBENEFITS_DISCOUNTS

Discounts in Azure Billing Benefits.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BILLINGBENEFITS_DISCOUNTS"

smartscapeNodes "AZURE_MICROSOFT_BILLINGBENEFITS_DISCOUNTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Drills

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AZURERESILIENCEMANAGEMENT_DRILLS

Drills in Azure Resilience Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AZURERESILIENCEMANAGEMENT_DRILLS"

smartscapeNodes "AZURE_MICROSOFT_AZURERESILIENCEMANAGEMENT_DRILLS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Emerging issues

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCEHEALTH_EMERGINGISSUES

Emerging issues in Azure Resource Health.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCEHEALTH_EMERGINGISSUES"

smartscapeNodes "AZURE_MICROSOFT_RESOURCEHEALTH_EMERGINGISSUES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Enrollment accounts

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BILLING_ENROLLMENTACCOUNTS

Enrollment accounts in Azure Billing.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BILLING_ENROLLMENTACCOUNTS"

smartscapeNodes "AZURE_MICROSOFT_BILLING_ENROLLMENTACCOUNTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Events

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_RESOURCEHEALTH_EVENTS

Events in Azure Resource Health.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_RESOURCEHEALTH_EVENTS"

smartscapeNodes "AZURE_MICROSOFT_RESOURCEHEALTH_EVENTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Experiments

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_CHAOS_EXPERIMENTS

Experiments in Azure Chaos Studio.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_CHAOS_EXPERIMENTS"

smartscapeNodes "AZURE_MICROSOFT_CHAOS_EXPERIMENTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Exports

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_COSTMANAGEMENT_EXPORTS

Exports in Azure Cost Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_COSTMANAGEMENT_EXPORTS"

smartscapeNodes "AZURE_MICROSOFT_COSTMANAGEMENT_EXPORTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

External billing accounts

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_COSTMANAGEMENT_EXTERNALBILLINGACCOUNTS

External billing accounts in Azure Cost Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_COSTMANAGEMENT_EXTERNALBILLINGACCOUNTS"

smartscapeNodes "AZURE_MICROSOFT_COSTMANAGEMENT_EXTERNALBILLINGACCOUNTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

External subscriptions

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_COSTMANAGEMENT_EXTERNALSUBSCRIPTIONS

External subscriptions in Azure Cost Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_COSTMANAGEMENT_EXTERNALSUBSCRIPTIONS"

smartscapeNodes "AZURE_MICROSOFT_COSTMANAGEMENT_EXTERNALSUBSCRIPTIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Free services

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_BILLINGBENEFITS_FREESERVICES

Free services in Azure Billing Benefits.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_BILLINGBENEFITS_FREESERVICES"

smartscapeNodes "AZURE_MICROSOFT_BILLINGBENEFITS_FREESERVICES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Goal assignments

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AZURERESILIENCEMANAGEMENT_GOALASSIGNMENTS

Goal assignments in Azure Resilience Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AZURERESILIENCEMANAGEMENT_GOALASSIGNMENTS"

smartscapeNodes "AZURE_MICROSOFT_AZURERESILIENCEMANAGEMENT_GOALASSIGNMENTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Goal templates

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_AZURERESILIENCEMANAGEMENT_GOALTEMPLATES

Goal templates in Azure Resilience Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_AZURERESILIENCEMANAGEMENT_GOALTEMPLATES"

smartscapeNodes "AZURE_MICROSOFT_AZURERESILIENCEMANAGEMENT_GOALTEMPLATES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Grafana

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_DASHBOARD_GRAFANA

Grafana in Azure Managed Grafana.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_DASHBOARD_GRAFANA"

smartscapeNodes "AZURE_MICROSOFT_DASHBOARD_GRAFANA"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Grants

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_EDUCATION_GRANTS

Grants in Azure Education.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_EDUCATION_GRANTS"

smartscapeNodes "AZURE_MICROSOFT_EDUCATION_GRANTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Group quotas

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_QUOTA_GROUPQUOTAS

Group quotas in Azure Quota.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_QUOTA_GROUPQUOTAS"

smartscapeNodes "AZURE_MICROSOFT_QUOTA_GROUPQUOTAS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status