Try it free

Networking

  • Latest Dynatrace
  • Reference

Contains entity definitions for Azure Networking stored in Smartscape on Grail. Entities are prefixed with AZURE_.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for Azure Networking entity types.

smartscapeNodes "AZURE_MICROSOFT_CDN*"
| append [ smartscapeNodes "AZURE_MICROSOFT_DELEGATEDNETWORK*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_MANAGEDNETWORK*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_MANAGEDNETWORKFABRIC*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_NETWORK_*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_NETWORKFUNCTION*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_PEERING*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_PROGRAMMABLECONNECTIVITY*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_SERVICENETWORKING*" ]
| append [ smartscapeNodes "AZURE_MICROSOFT_VOICESERVICES*" ]

Permission fields

  • azure.subscription
  • azure.resource.group
  • dt.security_context

AAAA

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_DNSZONES_AAAA

AAAA within DNS Zones in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_DNSZONES_AAAA"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_DNSZONES_AAAA"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Access control lists

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_MANAGEDNETWORKFABRIC_ACCESSCONTROLLISTS

Access control lists in Azure Operator Nexus Network Fabric.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_MANAGEDNETWORKFABRIC_ACCESSCONTROLLISTS"

smartscapeNodes "AZURE_MICROSOFT_MANAGEDNETWORKFABRIC_ACCESSCONTROLLISTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Access rules

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_NETWORKSECURITYPERIMETERS_PROFILES_ACCESSRULES

Access rules within Profiles in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_NETWORKSECURITYPERIMETERS_PROFILES_ACCESSRULES"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_NETWORKSECURITYPERIMETERS_PROFILES_ACCESSRULES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Afd custom domains

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_CDN_PROFILES_AFDCUSTOMDOMAINS

Afd custom domains in Azure CDN.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_CDN_PROFILES_AFDCUSTOMDOMAINS"

smartscapeNodes "AZURE_MICROSOFT_CDN_PROFILES_AFDCUSTOMDOMAINS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Application gateway

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_APPLICATIONGATEWAYS

Azure Application Gateway.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_APPLICATIONGATEWAYS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_APPLICATIONGATEWAYS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Application gateway available SSL options

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_APPLICATIONGATEWAYAVAILABLESSLOPTIONS

Application gateway available SSL options in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_APPLICATIONGATEWAYAVAILABLESSLOPTIONS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_APPLICATIONGATEWAYAVAILABLESSLOPTIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Application gateway web application firewall policies

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_APPLICATIONGATEWAYWEBAPPLICATIONFIREWALLPOLICIES

Application gateway web application firewall policies in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_APPLICATIONGATEWAYWEBAPPLICATIONFIREWALLPOLICIES"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_APPLICATIONGATEWAYWEBAPPLICATIONFIREWALLPOLICIES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Application security group

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_APPLICATIONSECURITYGROUPS

Azure Application Security Group for micro-segmentation of network security policies.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_APPLICATIONSECURITYGROUPS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_APPLICATIONSECURITYGROUPS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Authentication certificates

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_APPLICATIONGATEWAYS_AUTHENTICATIONCERTIFICATES

Authentication certificates in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_APPLICATIONGATEWAYS_AUTHENTICATIONCERTIFICATES"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_APPLICATIONGATEWAYS_AUTHENTICATIONCERTIFICATES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure Bastion

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_BASTIONHOSTS

Azure Bastion managed host.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_BASTIONHOSTS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_BASTIONHOSTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure CDN / front door profile

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_CDN_PROFILES

Azure CDN or Front Door profile.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_CDN_PROFILES"

smartscapeNodes "AZURE_MICROSOFT_CDN_PROFILES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure DNS zone

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_DNSZONES

Public DNS zone hosted in Azure DNS.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_DNSZONES"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_DNSZONES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure firewall

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_AZUREFIREWALLS

Cloud-native stateful network security service for Azure Virtual Networks.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_AZUREFIREWALLS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_AZUREFIREWALLS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure firewall policy

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_FIREWALLPOLICIES

Hierarchical policy managing Azure Firewall rules and threat intelligence settings.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_FIREWALLPOLICIES"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_FIREWALLPOLICIES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure front door (Classic)

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_FRONTDOORS

Classic Azure Front Door global HTTP load balancer and CDN.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_FRONTDOORS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_FRONTDOORS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure front door endpoint

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_CDN_PROFILES_AFDENDPOINTS

Azure Front Door endpoint.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_CDN_PROFILES_AFDENDPOINTS"

smartscapeNodes "AZURE_MICROSOFT_CDN_PROFILES_AFDENDPOINTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure load balancer

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_LOADBALANCERS

Layer 4 (TCP/UDP) Azure Load Balancer.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_LOADBALANCERS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_LOADBALANCERS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure network manager

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_NETWORKMANAGERS

Centralised network management for large-scale Azure Virtual Network topologies.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_NETWORKMANAGERS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_NETWORKMANAGERS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure traffic collectors

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORKFUNCTION_AZURETRAFFICCOLLECTORS

Azure traffic collectors in Azure Network Function Manager.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORKFUNCTION_AZURETRAFFICCOLLECTORS"

smartscapeNodes "AZURE_MICROSOFT_NETWORKFUNCTION_AZURETRAFFICCOLLECTORS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure virtual WAN

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_VIRTUALWANS

Microsoft-managed wide area network for global branch and VNet connectivity.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_VIRTUALWANS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_VIRTUALWANS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Azure web categories

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_AZUREWEBCATEGORIES

Azure web categories in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_AZUREWEBCATEGORIES"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_AZUREWEBCATEGORIES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Backend HTTP settings

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_APPLICATIONGATEWAYS_BACKENDHTTPSETTINGSCOLLECTION

Backend HTTP settings within Application Gateways in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_APPLICATIONGATEWAYS_BACKENDHTTPSETTINGSCOLLECTION"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_APPLICATIONGATEWAYS_BACKENDHTTPSETTINGSCOLLECTION"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Backend address pools

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_LOADBALANCERS_BACKENDADDRESSPOOLS

Backend address pools within Load Balancers in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_LOADBALANCERS_BACKENDADDRESSPOOLS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_LOADBALANCERS_BACKENDADDRESSPOOLS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

CDN web application firewall policies

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_CDN_CDNWEBAPPLICATIONFIREWALLPOLICIES

CDN web application firewall policies in Azure CDN.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_CDN_CDNWEBAPPLICATIONFIREWALLPOLICIES"

smartscapeNodes "AZURE_MICROSOFT_CDN_CDNWEBAPPLICATIONFIREWALLPOLICIES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

CNAME

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_DNSZONES_CNAME

CNAME within DNS Zones in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_DNSZONES_CNAME"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_DNSZONES_CNAME"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Cloud services lots

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_CLOUDSERVICESLOTS

Cloud services lots in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_CLOUDSERVICESLOTS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_CLOUDSERVICESLOTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Connection monitors

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_NETWORKWATCHERS_CONNECTIONMONITORS

Connection monitors within Network Watchers in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_NETWORKWATCHERS_CONNECTIONMONITORS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_NETWORKWATCHERS_CONNECTIONMONITORS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Connectivity configurations

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_NETWORKMANAGERS_CONNECTIVITYCONFIGURATIONS

Connectivity (hub-and-spoke / mesh) configuration in Azure Network Manager.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_NETWORKMANAGERS_CONNECTIVITYCONFIGURATIONS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_NETWORKMANAGERS_CONNECTIVITYCONFIGURATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Connectivity regional goal states

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_NETWORKMANAGERS_CONNECTIVITYREGIONALGOALSTATES

Connectivity regional goal states in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_NETWORKMANAGERS_CONNECTIVITYREGIONALGOALSTATES"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_NETWORKMANAGERS_CONNECTIVITYREGIONALGOALSTATES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Controller

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_DELEGATEDNETWORK_CONTROLLER

Controller in Azure Delegated Network Services.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_DELEGATEDNETWORK_CONTROLLER"

smartscapeNodes "AZURE_MICROSOFT_DELEGATEDNETWORK_CONTROLLER"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Custom IP prefixes

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_CUSTOMIPPREFIXES

Custom IP prefixes in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_CUSTOMIPPREFIXES"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_CUSTOMIPPREFIXES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

DDoS custom policies

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_DDOSCUSTOMPOLICIES

DDoS custom policies in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_DDOSCUSTOMPOLICIES"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_DDOSCUSTOMPOLICIES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

DDoS protection plans

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_DDOSPROTECTIONPLANS

DDoS protection plans in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_DDOSPROTECTIONPLANS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_DDOSPROTECTIONPLANS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

DNS forwarding rule sets

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_DNSFORWARDINGRULESETS

DNS forwarding rule sets in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_DNSFORWARDINGRULESETS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_DNSFORWARDINGRULESETS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

DNS resolver domain lists

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_DNSRESOLVERDOMAINLISTS

DNS resolver domain lists in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_DNSRESOLVERDOMAINLISTS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_DNSRESOLVERDOMAINLISTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

DNS resolver policies

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_DNSRESOLVERPOLICIES

DNS resolver policies in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_DNSRESOLVERPOLICIES"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_DNSRESOLVERPOLICIES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

DNS resolvers

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_DNSRESOLVERS

DNS resolvers in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_DNSRESOLVERS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_DNSRESOLVERS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

DSCP configurations

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_DSCPCONFIGURATIONS

DSCP configurations in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_DSCPCONFIGURATIONS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_DSCPCONFIGURATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Default security rules

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_NETWORKSECURITYGROUPS_DEFAULTSECURITYRULES

Built-in default security rules of a Network Security Group in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_NETWORKSECURITYGROUPS_DEFAULTSECURITYRULES"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_NETWORKSECURITYGROUPS_DEFAULTSECURITYRULES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Delegated subnets

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_DELEGATEDNETWORK_DELEGATEDSUBNETS

Delegated subnets in Azure Delegated Network Services.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_DELEGATEDNETWORK_DELEGATEDSUBNETS"

smartscapeNodes "AZURE_MICROSOFT_DELEGATEDNETWORK_DELEGATEDSUBNETS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Delegations

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_VIRTUALNETWORKS_SUBNETS_DELEGATIONS

Delegations in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_VIRTUALNETWORKS_SUBNETS_DELEGATIONS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_VIRTUALNETWORKS_SUBNETS_DELEGATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Edge actions

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_CDN_EDGEACTIONS

Edge actions in Azure CDN.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_CDN_EDGEACTIONS"

smartscapeNodes "AZURE_MICROSOFT_CDN_EDGEACTIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Effective routing rules

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_SUBNETS_EFFECTIVEROUTINGRULES

Effective routing rules applied to a subnet in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_SUBNETS_EFFECTIVEROUTINGRULES"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_SUBNETS_EFFECTIVEROUTINGRULES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Effective security user rules

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_SUBNETS_EFFECTIVESECURITYUSERRULES

Effective security admin user rules applied to a subnet in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_SUBNETS_EFFECTIVESECURITYUSERRULES"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_SUBNETS_EFFECTIVESECURITYUSERRULES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Endpoints

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_TRAFFICMANAGERPROFILES_ENDPOINTS

Endpoints in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_TRAFFICMANAGERPROFILES_ENDPOINTS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_TRAFFICMANAGERPROFILES_ENDPOINTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

ExpressRoute circuit

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_EXPRESSROUTECIRCUITS

Azure ExpressRoute circuit.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_EXPRESSROUTECIRCUITS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_EXPRESSROUTECIRCUITS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

ExpressRoute cross connections

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_EXPRESSROUTECROSSCONNECTIONS

ExpressRoute cross connections in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_EXPRESSROUTECROSSCONNECTIONS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_EXPRESSROUTECROSSCONNECTIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

ExpressRoute gateway

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_EXPRESSROUTEGATEWAYS

Azure ExpressRoute gateway connecting a VNet to an ExpressRoute circuit.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_EXPRESSROUTEGATEWAYS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_EXPRESSROUTEGATEWAYS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

ExpressRoute ports

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_EXPRESSROUTEPORTS

ExpressRoute ports in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_EXPRESSROUTEPORTS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_EXPRESSROUTEPORTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

ExpressRoute ports locations

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_EXPRESSROUTEPORTSLOCATIONS

ExpressRoute ports locations in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_EXPRESSROUTEPORTSLOCATIONS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_EXPRESSROUTEPORTSLOCATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

ExpressRoute provider ports

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_EXPRESSROUTEPROVIDERPORTS

ExpressRoute provider ports in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_EXPRESSROUTEPROVIDERPORTS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_EXPRESSROUTEPROVIDERPORTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Flowlogs

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_NETWORKWATCHERS_FLOWLOGS

Flowlogs within Network Watchers in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_NETWORKWATCHERS_FLOWLOGS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_NETWORKWATCHERS_FLOWLOGS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Front door WAF policy

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_FRONTDOORWEBAPPLICATIONFIREWALLPOLICIES

Web Application Firewall policy applied to Azure Front Door.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_FRONTDOORWEBAPPLICATIONFIREWALLPOLICIES"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_FRONTDOORWEBAPPLICATIONFIREWALLPOLICIES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Front door origin groups

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_CDN_PROFILES_AFDORIGINGROUPS

Origin group for an Azure Front Door (Standard/Premium) profile.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_CDN_PROFILES_AFDORIGINGROUPS"

smartscapeNodes "AZURE_MICROSOFT_CDN_PROFILES_AFDORIGINGROUPS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Frontend IP configurations

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_LOADBALANCERS_FRONTENDIPCONFIGURATIONS

Frontend IP configurations within Load Balancers in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_LOADBALANCERS_FRONTENDIPCONFIGURATIONS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_LOADBALANCERS_FRONTENDIPCONFIGURATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Frontend ports

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_APPLICATIONGATEWAYS_FRONTENDPORTS

Frontend ports within Application Gateways in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_APPLICATIONGATEWAYS_FRONTENDPORTS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_APPLICATIONGATEWAYS_FRONTENDPORTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Gateway IP configurations

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_APPLICATIONGATEWAYS_GATEWAYIPCONFIGURATIONS

Gateway IP configurations within Application Gateways in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_APPLICATIONGATEWAYS_GATEWAYIPCONFIGURATIONS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_APPLICATIONGATEWAYS_GATEWAYIPCONFIGURATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Gateways

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_PROGRAMMABLECONNECTIVITY_GATEWAYS

Gateways in Azure Programmable Connectivity.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_PROGRAMMABLECONNECTIVITY_GATEWAYS"

smartscapeNodes "AZURE_MICROSOFT_PROGRAMMABLECONNECTIVITY_GATEWAYS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

HTTP listeners

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_APPLICATIONGATEWAYS_HTTPLISTENERS

HTTP listeners in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_APPLICATIONGATEWAYS_HTTPLISTENERS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_APPLICATIONGATEWAYS_HTTPLISTENERS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

IP allocations

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_IPALLOCATIONS

IP allocations in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_IPALLOCATIONS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_IPALLOCATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

IP communities

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_MANAGEDNETWORKFABRIC_IPCOMMUNITIES

IP communities in Azure Operator Nexus Network Fabric.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_MANAGEDNETWORKFABRIC_IPCOMMUNITIES"

smartscapeNodes "AZURE_MICROSOFT_MANAGEDNETWORKFABRIC_IPCOMMUNITIES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

IP configurations

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_VIRTUALNETWORKGATEWAYS_IPCONFIGURATIONS

IP configurations within VPN / Virtual Network Gateways in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_VIRTUALNETWORKGATEWAYS_IPCONFIGURATIONS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_VIRTUALNETWORKGATEWAYS_IPCONFIGURATIONS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

IP extended communities

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_MANAGEDNETWORKFABRIC_IPEXTENDEDCOMMUNITIES

IP extended communities in Azure Operator Nexus Network Fabric.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_MANAGEDNETWORKFABRIC_IPEXTENDEDCOMMUNITIES"

smartscapeNodes "AZURE_MICROSOFT_MANAGEDNETWORKFABRIC_IPEXTENDEDCOMMUNITIES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

IP groups

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_IPGROUPS

IP groups in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_IPGROUPS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_IPGROUPS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

IP prefixes

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_MANAGEDNETWORKFABRIC_IPPREFIXES

IP prefixes in Azure Operator Nexus Network Fabric.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_MANAGEDNETWORKFABRIC_IPPREFIXES"

smartscapeNodes "AZURE_MICROSOFT_MANAGEDNETWORKFABRIC_IPPREFIXES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

IPAM pools

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_NETWORKMANAGERS_IPAMPOOLS

IP address management (IPAM) pool in Azure Network Manager.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_NETWORKMANAGERS_IPAMPOOLS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_NETWORKMANAGERS_IPAMPOOLS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Inbound NAT pools

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_LOADBALANCERS_INBOUNDNATPOOLS

Inbound NAT pools within Load Balancers in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_LOADBALANCERS_INBOUNDNATPOOLS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_LOADBALANCERS_INBOUNDNATPOOLS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Inbound NAT rules

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_LOADBALANCERS_INBOUNDNATRULES

Inbound NAT rules within Load Balancers in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_LOADBALANCERS_INBOUNDNATRULES"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_LOADBALANCERS_INBOUNDNATRULES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Interconnect groups

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_INTERCONNECTGROUPS

Interconnect groups in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_INTERCONNECTGROUPS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_INTERCONNECTGROUPS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Interface endpoints

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_INTERFACEENDPOINTS

Interface endpoints in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_INTERFACEENDPOINTS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_INTERFACEENDPOINTS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Internet gateway rules

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_MANAGEDNETWORKFABRIC_INTERNETGATEWAYRULES

Internet gateway rules in Azure Operator Nexus Network Fabric.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_MANAGEDNETWORKFABRIC_INTERNETGATEWAYRULES"

smartscapeNodes "AZURE_MICROSOFT_MANAGEDNETWORKFABRIC_INTERNETGATEWAYRULES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Internet gateways

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_MANAGEDNETWORKFABRIC_INTERNETGATEWAYS

Internet gateways in Azure Operator Nexus Network Fabric.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_MANAGEDNETWORKFABRIC_INTERNETGATEWAYS"

smartscapeNodes "AZURE_MICROSOFT_MANAGEDNETWORKFABRIC_INTERNETGATEWAYS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

L2 isolation domains

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_MANAGEDNETWORKFABRIC_L2ISOLATIONDOMAINS

L2 isolation domains in Azure Operator Nexus Network Fabric.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_MANAGEDNETWORKFABRIC_L2ISOLATIONDOMAINS"

smartscapeNodes "AZURE_MICROSOFT_MANAGEDNETWORKFABRIC_L2ISOLATIONDOMAINS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

L3 isolation domains

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_MANAGEDNETWORKFABRIC_L3ISOLATIONDOMAINS

L3 isolation domains in Azure Operator Nexus Network Fabric.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_MANAGEDNETWORKFABRIC_L3ISOLATIONDOMAINS"

smartscapeNodes "AZURE_MICROSOFT_MANAGEDNETWORKFABRIC_L3ISOLATIONDOMAINS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Link references

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_NETWORKSECURITYPERIMETERS_LINKREFERENCES

Link references in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_NETWORKSECURITYPERIMETERS_LINKREFERENCES"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_NETWORKSECURITYPERIMETERS_LINKREFERENCES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Links

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_NETWORKSECURITYPERIMETERS_LINKS

Links within Network Security Perimeters in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_NETWORKSECURITYPERIMETERS_LINKS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_NETWORKSECURITYPERIMETERS_LINKS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Load balancer backend addresses

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_LOADBALANCERS_BACKENDADDRESSPOOLS_LOADBALANCERBACKENDADDRESSES

Load balancer backend addresses in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_LOADBALANCERS_BACKENDADDRESSPOOLS_LOADBALANCERBACKENDADDRESSES"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_LOADBALANCERS_BACKENDADDRESSPOOLS_LOADBALANCERBACKENDADDRESSES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Load balancing rules

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_LOADBALANCERS_LOADBALANCINGRULES

Load balancing rule on an Azure Load Balancer.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_LOADBALANCERS_LOADBALANCINGRULES"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_LOADBALANCERS_LOADBALANCINGRULES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Load distribution policies

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_APPLICATIONGATEWAYS_LOADDISTRIBUTIONPOLICIES

Load distribution policies in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_APPLICATIONGATEWAYS_LOADDISTRIBUTIONPOLICIES"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_APPLICATIONGATEWAYS_LOADDISTRIBUTIONPOLICIES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Local network gateway

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_LOCALNETWORKGATEWAYS

Azure Local Network Gateway representing the on-premises VPN endpoint.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_LOCALNETWORKGATEWAYS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_LOCALNETWORKGATEWAYS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

MX

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_DNSZONES_MX

MX within DNS Zones in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_DNSZONES_MX"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_DNSZONES_MX"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Managed networks

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_MANAGEDNETWORK_MANAGEDNETWORKS

Managed networks in Azure Managed Network.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_MANAGEDNETWORK_MANAGEDNETWORKS"

smartscapeNodes "AZURE_MICROSOFT_MANAGEDNETWORK_MANAGEDNETWORKS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Management IP configuration

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_AZUREFIREWALLS_MANAGEMENTIPCONFIGURATION

Management IP configuration in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_AZUREFIREWALLS_MANAGEMENTIPCONFIGURATION"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_AZUREFIREWALLS_MANAGEMENTIPCONFIGURATION"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Members

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_NETWORKMANAGERS_NETWORKGROUPS_MEMBERS

Members within Network Groups in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_NETWORKMANAGERS_NETWORKGROUPS_MEMBERS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_NETWORKMANAGERS_NETWORKGROUPS_MEMBERS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

NAT gateway

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_NATGATEWAYS

Azure NAT Gateway.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_NATGATEWAYS"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_NATGATEWAYS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Natrules

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_NETWORK_VIRTUALNETWORKGATEWAYS_NATRULES

NAT Rules within VPN / Virtual Network Gateways in Azure Networking.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_NETWORK_VIRTUALNETWORKGATEWAYS_NATRULES"

smartscapeNodes "AZURE_MICROSOFT_NETWORK_VIRTUALNETWORKGATEWAYS_NATRULES"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string

experimentalDisplay name: Azure resource SKU tierTier of the Azure resource SKU

Basic

azure.resource.sku.capacity

string

experimentalDisplay name: Azure resource SKU capacityCapacity of the Azure resource SKU

20

azure.status

string

experimentalDisplay name: Azure statusThe status of the instance

Running; Stopped (deallocated)

azure.provisioning_state

string

experimentalDisplay name: Azure provisioning stateThe provisioning status of the resource

Succeeded; DELETED; ERROR; INCOMPLETE

azure.object

string

experimentalDisplay name: Azure objectThe full JSON content of Azure object

azure.properties.version

string

experimentalDisplay name: Azure properties versionThe json content version

...

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.tenant.id

string

resource experimentalDisplay name: Azure tenant IDUnique, immutable identifier assigned to the Azure tenant.

37c4add3-612a-483d-8b24-cccbb35d3306

Cloud entity fields

Fields that are provided by all Cloud workloads.

AttributeTypeDescriptionExamples

cloud.acquisition.status

string

experimentalDisplay name: Cloud acquisition statusThe status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.

OK; DELETED; ERROR; INCOMPLETE

Neighbor groups

Smartscape node name: azure.resource.name

Smartscape node type: AZURE_MICROSOFT_MANAGEDNETWORKFABRIC_NEIGHBORGROUPS

Neighbor groups in Azure Operator Nexus Network Fabric.

Query

Fetch all Smartscape nodes from the smartscape.nodes table and filter for the entity type "AZURE_MICROSOFT_MANAGEDNETWORKFABRIC_NEIGHBORGROUPS"

smartscapeNodes "AZURE_MICROSOFT_MANAGEDNETWORKFABRIC_NEIGHBORGROUPS"

ID input

The ID is calculated based on the following fields in the defined order: azure.resource.id

Base entity fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples

id

smartscapeId

stableDisplay name: IDA Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.

<type>-017198AD253CBD63

id_classic

string

deprecatedDisplay name: Classic IDThe entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.

<type>-017198AD253CBD63

name

string

stableDisplay name: NameThe entity name.

localhost; easyTravel; product-catalog

type

string

stableDisplay name: TypeThe entity type. UPPER_SNAKE_CASE string that represents the type of the entity.

TYPE_A

tags

record

stableDisplay name: TagsA consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.

tags[tag_key-1] = [context_A_tag_val-1, context_B_tag_val-1]; tags[tag_key-2] = context_C_tag_val-1; tags:context_A[tag_key-1] = context_A_tag_val-1

lifetime

timeframe

stableDisplay name: LifetimeThe lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.

{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }

references

record

stableDisplay name: ReferencesProvides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.

{ references[runs_on.host] : [HOST-C251A1173C2B4B39,HOST-0E9038C7C4409D69], references[runs_on.container] : [CONTAINER-68A08967EF4F675B] }

dt.security_context

string[]

resource stableDisplay name: DT security contextThe security contexts associated with the entity. For Smartscape entities, this field is always an array.Tags: permission

[]

Azure resource fields

Contains all fields that are provided by all resources running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples

azure.subscription

string

resource stableDisplay name: Azure subscriptionAn Azure subscription is a logical container used to provision resources in Azure.Tags: permission primary-field

27e9b03f-04d2-2b69-b327-32f433f7ed21

azure.location

string

resource stableDisplay name: Azure locationA specific geographical location of Azure cloud resource.Tags: primary-field

westeurope

azure.availability_zones

string[]

resource experimentalDisplay name: Azure availability zonesAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableDisplay name: Azure resource groupA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

azure.resource.id

string

resource experimentalDisplay name: Azure resource IDA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.name

string

resource experimentalDisplay name: Azure resource nameUser-provided name of the Azure cloud resource.

demo-aks

azure.resource.type

string

resource experimentalDisplay name: Azure resource typeThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

Azure entity fields

Contains all fields that are provided by all Azure entities.

AttributeTypeDescriptionExamples

azure.resource.kind

string

experimentalDisplay name: Azure resource kindA kind of the Azure resource

app,linux

azure.resource.sku.name

string

experimentalDisplay name: Azure resource SKU nameName of the Azure resource SKU

B_Gen5_1

azure.resource.sku.tier

string