Try it free

Monitor

  • Latest Dynatrace
  • Reference

Contains entity definitions for Azure Monitor stored in Smartscape on Grail. Entities are prefixed with AZURE_.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for Azure Monitor entity types.

smartscapeNodes "AZURE_MICROSOFT_ALERTSMANAGEMENT*"
| append [ smartscapeNodes "AZURE_MICROSOFT_INSIGHTS*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_MONITOR*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_OPERATIONALINSIGHTS*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_OPERATIONSMANAGEMENT*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_SCOM*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_WORKLOADMONITOR*" ]

Permission fields

  • azure.subscription
  • azure.resource.group
  • dt.security_context

Activity log alerts

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_INSIGHTS_ACTIVITYLOGALERTS

Activity log alerts in Azure Monitor.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_INSIGHTS_ACTIVITYLOGALERTS"

smartscapeNodes "AZURE_MICROSOFT_INSIGHTS_ACTIVITYLOGALERTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Alert processing rule

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_ALERTSMANAGEMENT_ACTIONRULES

Rule that modifies or suppresses Azure Monitor alert notifications.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_ALERTSMANAGEMENT_ACTIONRULES"

smartscapeNodes "AZURE_MICROSOFT_ALERTSMANAGEMENT_ACTIONRULES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Application insights component

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_INSIGHTS_COMPONENTS

Application Insights resource collecting telemetry for application performance monitoring.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_INSIGHTS_COMPONENTS"

smartscapeNodes "AZURE_MICROSOFT_INSIGHTS_COMPONENTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Autoscale setting

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_INSIGHTS_AUTOSCALESETTINGS

Azure Monitor autoscale setting for dynamically scaling compute resources.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_INSIGHTS_AUTOSCALESETTINGS"

smartscapeNodes "AZURE_MICROSOFT_INSIGHTS_AUTOSCALESETTINGS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure monitor action group

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_INSIGHTS_ACTIONGROUPS

Action group defining notification recipients and automated responses for Azure Monitor alerts.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_INSIGHTS_ACTIONGROUPS"

smartscapeNodes "AZURE_MICROSOFT_INSIGHTS_ACTIONGROUPS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure monitor alert

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_ALERTSMANAGEMENT_ALERTS

Fired alert instance in Azure Monitor.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_ALERTSMANAGEMENT_ALERTS"

smartscapeNodes "AZURE_MICROSOFT_ALERTSMANAGEMENT_ALERTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure monitor workspace

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_MONITOR_ACCOUNTS

Azure monitor workspace for storing Prometheus metrics.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_MONITOR_ACCOUNTS"

smartscapeNodes "AZURE_MICROSOFT_MONITOR_ACCOUNTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure workbook

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_INSIGHTS_WORKBOOKS

Interactive Azure Monitor Workbook for data visualisation and analysis.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_INSIGHTS_WORKBOOKS"

smartscapeNodes "AZURE_MICROSOFT_INSIGHTS_WORKBOOKS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Clusters

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_OPERATIONALINSIGHTS_CLUSTERS

Clusters in Azure Monitor Logs.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_OPERATIONALINSIGHTS_CLUSTERS"

smartscapeNodes "AZURE_MICROSOFT_OPERATIONALINSIGHTS_CLUSTERS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Components

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_WORKLOADMONITOR_COMPONENTS

Components in Azure Workload Monitor.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_WORKLOADMONITOR_COMPONENTS"

smartscapeNodes "AZURE_MICROSOFT_WORKLOADMONITOR_COMPONENTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Data collection endpoint

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_INSIGHTS_DATACOLLECTIONENDPOINTS

Endpoint for ingesting data into Azure Monitor via the Logs Ingestion API.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_INSIGHTS_DATACOLLECTIONENDPOINTS"

smartscapeNodes "AZURE_MICROSOFT_INSIGHTS_DATACOLLECTIONENDPOINTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Data collection rule

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_INSIGHTS_DATACOLLECTIONRULES

Azure Monitor data collection rule.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_INSIGHTS_DATACOLLECTIONRULES"

smartscapeNodes "AZURE_MICROSOFT_INSIGHTS_DATACOLLECTIONRULES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Data collection rule associations

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_INSIGHTS_DATACOLLECTIONRULEASSOCIATIONS

Data collection rule associations in Azure Monitor.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_INSIGHTS_DATACOLLECTIONRULEASSOCIATIONS"

smartscapeNodes "AZURE_MICROSOFT_INSIGHTS_DATACOLLECTIONRULEASSOCIATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Diagnostic settings

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_INSIGHTS_DIAGNOSTICSETTINGS

Diagnostic settings in Azure Monitor.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_INSIGHTS_DIAGNOSTICSETTINGS"

smartscapeNodes "AZURE_MICROSOFT_INSIGHTS_DIAGNOSTICSETTINGS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Diagnostic settings categories

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_INSIGHTS_DIAGNOSTICSETTINGSCATEGORIES

Diagnostic settings categories in Azure Monitor.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_INSIGHTS_DIAGNOSTICSETTINGSCATEGORIES"

smartscapeNodes "AZURE_MICROSOFT_INSIGHTS_DIAGNOSTICSETTINGSCATEGORIES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Guest diagnostic settings

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_INSIGHTS_GUESTDIAGNOSTICSETTINGS

Guest diagnostic settings in Azure Monitor.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_INSIGHTS_GUESTDIAGNOSTICSETTINGS"

smartscapeNodes "AZURE_MICROSOFT_INSIGHTS_GUESTDIAGNOSTICSETTINGS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Guest diagnostic settings association

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_INSIGHTS_GUESTDIAGNOSTICSETTINGSASSOCIATION

Guest diagnostic settings association in Azure Monitor.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_INSIGHTS_GUESTDIAGNOSTICSETTINGSASSOCIATION"

smartscapeNodes "AZURE_MICROSOFT_INSIGHTS_GUESTDIAGNOSTICSETTINGSASSOCIATION"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Issues

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_ALERTSMANAGEMENT_ISSUES

Issues in Azure Monitor.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_ALERTSMANAGEMENT_ISSUES"

smartscapeNodes "AZURE_MICROSOFT_ALERTSMANAGEMENT_ISSUES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Log alert rule

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_INSIGHTS_SCHEDULEDQUERYRULES

Azure Monitor scheduled query rule.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_INSIGHTS_SCHEDULEDQUERYRULES"

smartscapeNodes "AZURE_MICROSOFT_INSIGHTS_SCHEDULEDQUERYRULES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Log analytics workspace

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_OPERATIONALINSIGHTS_WORKSPACES

Azure Monitor Log Analytics workspace.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_OPERATIONALINSIGHTS_WORKSPACES"

smartscapeNodes "AZURE_MICROSOFT_OPERATIONALINSIGHTS_WORKSPACES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Log profiles

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_INSIGHTS_LOGPROFILES

Log profiles in Azure Monitor.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_INSIGHTS_LOGPROFILES"

smartscapeNodes "AZURE_MICROSOFT_INSIGHTS_LOGPROFILES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Managed instances

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_SCOM_MANAGEDINSTANCES

Managed instances in Azure SCOM Managed Instance.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_SCOM_MANAGEDINSTANCES"

smartscapeNodes "AZURE_MICROSOFT_SCOM_MANAGEDINSTANCES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Management associations

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_OPERATIONSMANAGEMENT_MANAGEMENTASSOCIATIONS

Management associations in Azure Operations Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_OPERATIONSMANAGEMENT_MANAGEMENTASSOCIATIONS"

smartscapeNodes "AZURE_MICROSOFT_OPERATIONSMANAGEMENT_MANAGEMENTASSOCIATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Management configurations

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_OPERATIONSMANAGEMENT_MANAGEMENTCONFIGURATIONS

Management configurations in Azure Operations Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_OPERATIONSMANAGEMENT_MANAGEMENTCONFIGURATIONS"

smartscapeNodes "AZURE_MICROSOFT_OPERATIONSMANAGEMENT_MANAGEMENTCONFIGURATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Metric alert rule

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_INSIGHTS_METRICALERTS

Azure Monitor metric-based alert rule.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_INSIGHTS_METRICALERTS"

smartscapeNodes "AZURE_MICROSOFT_INSIGHTS_METRICALERTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Monitor instances

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_WORKLOADMONITOR_MONITORINSTANCES

Monitor instances in Azure Workload Monitor.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_WORKLOADMONITOR_MONITORINSTANCES"

smartscapeNodes "AZURE_MICROSOFT_WORKLOADMONITOR_MONITORINSTANCES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Monitors

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_WORKLOADMONITOR_MONITORS

Monitors in Azure Workload Monitor.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_WORKLOADMONITOR_MONITORS"

smartscapeNodes "AZURE_MICROSOFT_WORKLOADMONITOR_MONITORS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

My workbooks

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_INSIGHTS_MYWORKBOOKS

My workbooks in Azure Monitor.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_INSIGHTS_MYWORKBOOKS"

smartscapeNodes "AZURE_MICROSOFT_INSIGHTS_MYWORKBOOKS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Notification settings

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_WORKLOADMONITOR_NOTIFICATIONSETTINGS

Notification settings in Azure Workload Monitor.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_WORKLOADMONITOR_NOTIFICATIONSETTINGS"

smartscapeNodes "AZURE_MICROSOFT_WORKLOADMONITOR_NOTIFICATIONSETTINGS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Pipeline groups

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_MONITOR_PIPELINEGROUPS

Pipeline groups in Azure Monitor.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_MONITOR_PIPELINEGROUPS"

smartscapeNodes "AZURE_MICROSOFT_MONITOR_PIPELINEGROUPS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Private link scopes

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_INSIGHTS_PRIVATELINKSCOPES

Private link scopes in Azure Monitor.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_INSIGHTS_PRIVATELINKSCOPES"

smartscapeNodes "AZURE_MICROSOFT_INSIGHTS_PRIVATELINKSCOPES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Prometheus rule group

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_ALERTSMANAGEMENT_PROMETHEUSRULEGROUPS

Alerting or recording rule group for Azure Monitor managed Prometheus.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_ALERTSMANAGEMENT_PROMETHEUSRULEGROUPS"

smartscapeNodes "AZURE_MICROSOFT_ALERTSMANAGEMENT_PROMETHEUSRULEGROUPS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Query packs

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_OPERATIONALINSIGHTS_QUERYPACKS

Query packs in Azure Monitor Logs.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_OPERATIONALINSIGHTS_QUERYPACKS"

smartscapeNodes "AZURE_MICROSOFT_OPERATIONALINSIGHTS_QUERYPACKS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

SLIs

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_MONITOR_SLIS

SLIs in Azure Monitor.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_MONITOR_SLIS"

smartscapeNodes "AZURE_MICROSOFT_MONITOR_SLIS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Smart detector alert rule

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_ALERTSMANAGEMENT_SMARTDETECTORALERTRULES

Alert rule powered by Application Insights Smart Detection.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_ALERTSMANAGEMENT_SMARTDETECTORALERTRULES"

smartscapeNodes "AZURE_MICROSOFT_ALERTSMANAGEMENT_SMARTDETECTORALERTRULES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Smart group

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_ALERTSMANAGEMENT_SMARTGROUPS

Automatically grouped set of related Azure Monitor alerts.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_ALERTSMANAGEMENT_SMARTGROUPS"

smartscapeNodes "AZURE_MICROSOFT_ALERTSMANAGEMENT_SMARTGROUPS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Solutions

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_OPERATIONSMANAGEMENT_SOLUTIONS

Solutions in Azure Operations Management.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_OPERATIONSMANAGEMENT_SOLUTIONS"

smartscapeNodes "AZURE_MICROSOFT_OPERATIONSMANAGEMENT_SOLUTIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Tenant activity log alerts

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_ALERTSMANAGEMENT_TENANTACTIVITYLOGALERTS

Tenant activity log alerts in Azure Monitor.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_ALERTSMANAGEMENT_TENANTACTIVITYLOGALERTS"

smartscapeNodes "AZURE_MICROSOFT_ALERTSMANAGEMENT_TENANTACTIVITYLOGALERTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

VM insights on boarding statuses

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_INSIGHTS_VMINSIGHTSONBOARDINGSTATUSES

VM insights on boarding statuses in Azure Monitor.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_INSIGHTS_VMINSIGHTSONBOARDINGSTATUSES"

smartscapeNodes "AZURE_MICROSOFT_INSIGHTS_VMINSIGHTSONBOARDINGSTATUSES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Web tests

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_INSIGHTS_WEBTESTS

Web tests in Azure Monitor.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_INSIGHTS_WEBTESTS"

smartscapeNodes "AZURE_MICROSOFT_INSIGHTS_WEBTESTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Workbook templates

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_INSIGHTS_WORKBOOKTEMPLATES

Workbook templates in Azure Monitor.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_INSIGHTS_WORKBOOKTEMPLATES"

smartscapeNodes "AZURE_MICROSOFT_INSIGHTS_WORKBOOKTEMPLATES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stable
Display name: ID
A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecated
Display name: Classic ID
The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stable
Display name: Name
The entity name.

localhost; easyTravel; product-catalog

type

string

stable
Display name: Type
The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stable
Display name: Tags
A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stable
Display name: Lifetime
The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stable
Display name: References
Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stable
Display name: DT security context
The security contexts associated with the entity. For Smartscape entities, this field is always an array.
Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimental
Display name: Azure resource ID
A unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimental
Display name: Azure resource name
User-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimental
Display name: Azure resource type
The name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimental
Display name: Azure resource kind
A kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimental
Display name: Azure resource SKU name
Name of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimental
Display name: Azure resource SKU tier
Tier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimental
Display name: Azure resource SKU capacity
Capacity of the Azure resource SKU

20

azure.status

string

experimental
Display name: Azure status
The status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimental
Display name: Azure provisioning state
The provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimental
Display name: Azure object
The full JSON content of Azure object

azure.properties.version

string

experimental
Display name: Azure properties version
The json content version

...

azure.subscription

string

resource stable
Display name: Azure subscription
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stable
Display name: Azure location
A specific geographical location of Azure cloud resource.
Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimental
Display name: Azure availability zones
Availability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stable
Display name: Azure resource group
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimental
Display name: Azure tenant ID
Unique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimental
Display name: Cloud acquisition status
The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE