The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
Fetch all smartscape nodes from the smartscape.nodes table and filter for the entity type "GCP_COMPUTE_GOOGLEAPIS_COM_DISK".
smartscapeNodes"GCP_COMPUTE_GOOGLEAPIS_COM_DISK"
Base entity fields
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
Fetch all smartscape nodes from the smartscape.nodes table and filter for the entity type "GCP_COMPUTE_GOOGLEAPIS_COM_IMAGE".
smartscapeNodes"GCP_COMPUTE_GOOGLEAPIS_COM_IMAGE"
Base entity fields
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
OK; DELETED; ERROR; INCOMPLETE
Compute fields
Fields that are provided for compute units, both virtual machines and physical hosts.
Attribute
Type
Description
Examples
cores
string
stable Display name: Cores Number of primary compute units available on the monitored host. On bare metal machines this means physical CPUs. In virtualized environments these are the cores exposed by the hypervisor (vCPUs). Use logical_cores for scheduler visible count.
4
logical_cores
string
stable Number of logical execution contexts (logical cores) visible to the operating system scheduler on monitored host. This includes SMT / Hyper-Threading.
4
memory
string
stable Display name: Memory Total memory of monitored host, expressed in bytes.
stable Display name: Public IP IP address that is publicaly accessible. This is usually an IP address assigned to a NAT gateway or a load balancer, rather than to the instance itself.
['3.121.45.10']
host.type
string
resourceexperimental Display name: Host type Virtual Machine type, such as SKU on Azure
Standard_D2s_v3; m5.large; n1-standard-4
Compute Engine instance relationships
Type
Target type
Kind
Description
is_attached_to
GCP_COMPUTE_GOOGLEAPIS_COM_NETWORK
static
stable Is (typically) exclusively attached to the instance (1-many)
is_attached_to
GCP_COMPUTE_GOOGLEAPIS_COM_SUBNETWORK
static
stable Is (typically) exclusively attached to the instance (1-many)
uses
GCP_COMPUTE_GOOGLEAPIS_COM_DISK
static
stable Similar to is_attached_to but in the opposite direction. Examples: EC2 Instance uses DHCP options, Auto Scaling Group uses EC2 Launch Template
uses
GCP_IAM_GOOGLEAPIS_COM_SERVICEACCOUNT
static
stable Similar to is_attached_to but in the opposite direction. Examples: EC2 Instance uses DHCP options, Auto Scaling Group uses EC2 Launch Template
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
OK; DELETED; ERROR; INCOMPLETE
Compute fields
Fields that are provided for compute units, both virtual machines and physical hosts.
Attribute
Type
Description
Examples
cores
string
stable Display name: Cores Number of primary compute units available on the monitored host. On bare metal machines this means physical CPUs. In virtualized environments these are the cores exposed by the hypervisor (vCPUs). Use logical_cores for scheduler visible count.
4
logical_cores
string
stable Number of logical execution contexts (logical cores) visible to the operating system scheduler on monitored host. This includes SMT / Hyper-Threading.
4
memory
string
stable Display name: Memory Total memory of monitored host, expressed in bytes.
stable Display name: Public IP IP address that is publicaly accessible. This is usually an IP address assigned to a NAT gateway or a load balancer, rather than to the instance itself.
['3.121.45.10']
host.type
string
resourceexperimental Display name: Host type Virtual Machine type, such as SKU on Azure
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
OK; DELETED; ERROR; INCOMPLETE
Compute fields
Fields that are provided for compute units, both virtual machines and physical hosts.
Attribute
Type
Description
Examples
cores
string
stable Display name: Cores Number of primary compute units available on the monitored host. On bare metal machines this means physical CPUs. In virtualized environments these are the cores exposed by the hypervisor (vCPUs). Use logical_cores for scheduler visible count.
4
logical_cores
string
stable Number of logical execution contexts (logical cores) visible to the operating system scheduler on monitored host. This includes SMT / Hyper-Threading.
4
memory
string
stable Display name: Memory Total memory of monitored host, expressed in bytes.
stable Display name: Public IP IP address that is publicaly accessible. This is usually an IP address assigned to a NAT gateway or a load balancer, rather than to the instance itself.
['3.121.45.10']
host.type
string
resourceexperimental Display name: Host type Virtual Machine type, such as SKU on Azure
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
Fetch all smartscape nodes from the smartscape.nodes table and filter for the entity type "GCP_COMPUTE_GOOGLEAPIS_COM_ROUTE".
smartscapeNodes"GCP_COMPUTE_GOOGLEAPIS_COM_ROUTE"
Base entity fields
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.
The following base fields are used for all entities.
Attribute
Type
Description
Examples
id
smartscapeId
stable Display name: ID A Smartscape ID consists of two components: an UPPER_CASE entity type and a random 16-character hexadecimal unique identifier, separated by a dash. Use Smartscape conversion functions when working with strings that represent Smartscape IDs.
<type>-017198AD253CBD63
id_classic
string
deprecated Display name: Classic ID The entity ID that was used in the classic entity store. This ID is present in old monitoring data. Not all entities have this ID, and it is not generated for new entities. Use the id field instead, which is the Smartscape ID.
<type>-017198AD253CBD63
name
string
stable Display name: Name The entity name.
localhost; easyTravel; product-catalog
type
string
stable Display name: Type The entity type. UPPER_SNAKE_CASE string that represents the type of the entity.
TYPE_A
tags
record
stable Display name: Tags A consolidated record that aggregates all tag values originating from different contexts. Each nested field within tags represents a specific key (for example, release or name). The value of each nested field is the tag value from one or multiple contexts. Tags for specific context can be queried via tags:context field. Note that rule-based tags do not exist in the new model.
stable Display name: Lifetime The lifetime of the entity. This is a record with two nested fields: start and end, which represent the time when the entity was first and last observed, respectively. Each time an entity is updated, the end time is updated to the current time.
stable Display name: References Provides access to static edges pointing to other entities. In this record each nested field represents a relationship type and target type, and the value is an array of target smartscape IDs. This field is hidden by default but can be added using the fieldsAdd command.
resourcestable Display name: DT security context The security contexts associated with the entity. For Smartscape entities, this field is always an array. Tags: permission
[]
GCP resource fields
Attribute
Type
Description
Examples
gcp.asset.type
string
experimental Display name: GCP asset type The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
resourcestable Display name: Cloud provider Name of the cloud provider.
alibaba_cloud
cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.
Value
Description
Display name
alibaba_cloud
Alibaba Cloud
Alibaba Cloud
aws
Amazon Web Services
AWS
azure
Microsoft Azure
Azure
gcp
Google Cloud Platform
GCP
heroku
Heroku Platform as a Service
Heroku
ibm_cloud
IBM Cloud
IBM Cloud
tencent_cloud
Tencent Cloud
Tencent Cloud
GCP entity fields
Contains the fields shared by all GCP entities.
Attribute
Type
Description
Examples
gcp.state
string
experimental Display name: GCP state The provisioning state of the instance
experimental Display name: GCP object The full JSON payload of the resource as returned by the Google Cloud Asset Inventory API (the resource portion of the asset, including data and any supplementary configuration).
gcp.properties.version
string
experimental Display name: GCP properties version The gcp.object json content version
v1
gcp.organization.id
string
resourceexperimental Display name: GCP organization ID Unique, immutable identifier assigned to an organization resource.
123456789012
Cloud entity fields
Fields that are provided by all Cloud workloads.
Attribute
Type
Description
Examples
cloud.acquisition.status
string
experimental Display name: Cloud acquisition status The status of Smartscape nodes data acquisition by Data Acquisition Conroller OK - node is consistent DELETED - node was deleted in the cloud platform ERROR - there was an error acquiring node, but the node was upserted INCOMPLETE - there was an error acquiring node child resource (ie. EC2 Instance, with no EBS volumes due to missing permissions) , but the node was upserted.