Data imported into Insight

The data collected from Azure are assembled and imported into Insight and looks like this in Insight:

Object Schema Tree:

Resource Group

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Region

Object - Region




"Name" = ${Region}

Subscription

Object - Subscription




"Id" = ${Subscription}

Tags

Object - Tag




"Id" IN (${Tags${0}})

Lock

Object - Lock




"Reference Id" = ${Lock}

Subscription

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Status

STATUS





Id

TEXT

(tick)




Name

TEXT





Location Placement

TEXT





Quota

TEXT





Spending Limit

TEXT





Tag

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)

(tick)



Name

TEXT





Tag Name

TEXT





Value

TEXT





Region

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Name

TEXT

(tick)




Description

TEXT





Lock

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Lock Level

TEXT





Notes

TEXT





Reference Id

TEXT

(tick)




Extension

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Subscription

Object - Subscription




"Id" = ${Subscription}

Publisher

TEXT





Version

TEXT





Type Name

TEXT





User

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Subscription

Object - Subscription




"Id" = ${Subscription}

Account enabled

BOOLEAN





User created date

DATE_TIME





User Type

TEXT





First name

TEXT





Last name

TEXT





Principal Name

TEXT





Mail

TEXT





Mail Nickname

TEXT





Sign in name

TEXT





Location

TEXT





Company name

TEXT





Job title

TEXT





Department

TEXT





Office

TEXT





Street address

TEXT





Country

TEXT





Country

TEXT





Postal code

TEXT





Telephone number

TEXT





Mobile

TEXT





Manager

Object - User




"Id" = ${Manager}

Group

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Subscription

Object - Subscription




"Id" = ${Subscription}

Description

TEXT





Security enabled

BOOLEAN





Mail enabled

BOOLEAN





Mail

TEXT





Mail Nickname

TEXT





Users

Object - User




"Id" IN (${Users${0}})

Enterprise Applications

Object - Enterprise Application




"Name" IN (${Enterprise Applications${0}})

Groups

Object - Group




"Id" IN (${Groups${0}})

Enterprise Application

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Subscription

Object - Subscription




"Id" = ${Subscription}

Application Id

TEXT





Homepage

URL





Client Secrets

Object - Client Secret




"Id" IN (${Client Secrets${0}})

Client Secret

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Subscription

Object - Subscription




"Id" = ${Subscription}

Start Date

DATE_TIME





End Date

DATE_TIME





Virtual Machine

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Status

STATUS





Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Resource Group

Object - Resource Group




"Name" = ${Resource Group}

Region

Object - Region




"Name" = ${Region}

Subscription

Object - Subscription




"Id" = ${Subscription}

Tags

Object - Tag




"Id" IN (${Tags${0}})

Lock

Object - Lock




"Reference Id" = ${Lock}

Size

TEXT





VM Id

TEXT

(tick)




Computer Name

TEXT





Provisioning

TEXT





Boot Diagnostics Enabled

BOOLEAN





Boot Diagnostics Storage Uri

TEXT





Managed Disk Enabled

BOOLEAN





Managed Service Identity Enabled

BOOLEAN





Managed Service Identity Type

TEXT





License Type

TEXT





Admin Username

TEXT





Hostname

TEXT





Time Zone

TEXT





Agent Version

TEXT





Disable Password Authentication

BOOLEAN





Provision VM Agent

BOOLEAN





Enable Automatic Updates

BOOLEAN





Public IP Address

Object - Public IP Address




"Id" = ${Public IP Address}

OS Disk Caching Type

TEXT





OS Type

TEXT





OS Disk

Object - Disk




"Id" = ${OS Disk}

Data Disks

Object - Disk




"Id" IN (${Data Disks${0}})

Extension

Object - Extension




"Id" IN (${Extension${0}})

Virtual Machine Scale Set

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Resource Group

Object - Resource Group




"Name" = ${Resource Group}

Region

Object - Region




"Name" = ${Region}

Subscription

Object - Subscription




"Id" = ${Subscription}

Tags

Object - Tag




"Id" IN (${Tags${0}})

Lock

Object - Lock




"Reference Id" = ${Lock}

Capacity

INTEGER





Overprovision

BOOLEAN





Virtual Machine Eviction Policy

TEXT





Virtual Machine Priority

TEXT





Computer Name Prefix

TEXT





Boot Diagnostics Enabled

BOOLEAN





Boot Diagnostics Storage Uri

TEXT





Managed Disk Enabled

BOOLEAN





Managed Service Identity Enabled

BOOLEAN





Single Placement Group Enabled

BOOLEAN





Managed Service Identity

TEXT





SKU

TEXTAREA





Managed OS Disk Storage Account Type

TEXT





OS Disk Name

TEXT





OS Disk Caching Type

TEXT





OS Type

TEXT





OS Disk Image Location

TEXT





OS Disk Create Option

TEXT





Upgrade Mode

TEXT





Image Reference

Object - VM Scale Set OS Image




"Id" IN (${Image Reference${0}})

Data Disks

Object - VM Scale Set Data Disk




"Id" IN (${Data Disks${0}})

Extension

Object - Extension




"Id" IN (${Extension${0}})

Vhd Containers

TEXTAREA





Primary Network

Object - Virtual Network




"Id" IN (${Primary Network${0}})

Accelerated Networking Enabled

BOOLEAN





IP Forwarding Enabled

BOOLEAN





Network Interfaces

Object - Network Interface




"Id" IN (${Network Interfaces${0}})

Network Security Group

Object - Network Security Group




"Id" IN (${Network Security Group${0}})

Public IP Addresses

Object - Public IP Address




"Id" IN (${Public IP Addresses${0}})

Primary Internal Load Balancer

Object - Load Balancer




"Id" IN (${Primary Internal Load Balancer${0}})

Primary Internet Facing LoadBalancer

Object - Load Balancer




"Id" IN (${Primary Internet Facing LoadBalancer${0}})

Primary Internet Facing LoadBalancer Inbound Nat Pools

Object - Inbound Nat Pool




"Id" IN (${Primary Internet Facing LoadBalancer Inbound Nat Pools${0}})

Primary Internal LoadBalancer Inbound Nat Pools

Object - Inbound Nat Pool




"Id" IN (${Primary Internal LoadBalancer Inbound Nat Pools${0}})

Backend Internal Loadbalancer Virtual Machines

Object - Virtual Machine




"Id" IN (${Backend Internal Loadbalancer Virtual Machines${0}})

Backend Internet facing Loadbalancer Virtual Machines

Object - Virtual Machine




"Id" IN (${Backend Internet facing Loadbalancer Virtual Machines${0}})

VM Scale Set Data Disk

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Subscription

Object - Subscription




"Id" = ${Subscription}

Data Disk Create Option

TEXT





Storage Type

TEXT





Caching Type

TEXT





Data Disk Lun

INTEGER





Disk Size in GB

INTEGER





Write Accelerator Enabled

BOOLEAN





VM Scale Set OS Image

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Subscription

Object - Subscription




"Id" = ${Subscription}

Offer

TEXT





SKU

TEXT





Publisher

TEXT





Version

TEXT





Disk

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Resource Group

Object - Resource Group




"Name" = ${Resource Group}

Region

Object - Region




"Name" = ${Region}

Subscription

Object - Subscription




"Id" = ${Subscription}

Tags

Object - Tag




"Id" IN (${Tags${0}})

Lock

Object - Lock




"Reference Id" = ${Lock}

Creation Method

TEXT





OS Type

TEXT





Size

INTEGER





Virtual Machine

Object - Virtual Machine




"Id" = ${Virtual Machine}

SKU Type

TEXT





Source Type

TEXT





Snapshot

Object - Snapshot




"Id" = ${Snapshot}

Snapshot

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Resource Group

Object - Resource Group




"Name" = ${Resource Group}

Region

Object - Region




"Name" = ${Region}

Subscription

Object - Subscription




"Id" = ${Subscription}

Tags

Object - Tag




"Id" IN (${Tags${0}})

Lock

Object - Lock




"Reference Id" = ${Lock}

Creation Method

TEXT





OS Type

TEXT





Size

INTEGER





SKU Type

TEXT





Source Type

TEXT





Disk

Object - Disk




"Id" = ${Disk}

Availability set

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Resource Group

Object - Resource Group




"Name" = ${Resource Group}

Region

Object - Region




"Name" = ${Region}

Subscription

Object - Subscription




"Id" = ${Subscription}

Tags

Object - Tag




"Id" IN (${Tags${0}})

Lock

Object - Lock




"Reference Id" = ${Lock}

SKU Type

TEXT





Fault domains

INTEGER





Update domains

INTEGER





Virtual Machines

Object - Virtual Machine




"Id" IN (${Virtual Machines${0}})

Redis Cache

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Resource Group

Object - Resource Group




"Name" = ${Resource Group}

Region

Object - Region




"Name" = ${Region}

Subscription

Object - Subscription




"Id" = ${Subscription}

Tags

Object - Tag




"Id" IN (${Tags${0}})

Provisioning

TEXT





Premium Enabled

BOOLEAN





Shared Count

INTEGER





Redis Version

TEXT





Redis Configurations

TEXTAREA





Hostname

TEXT





Port

INTEGER





Minimum TLS Version

TEXT





Using Non-SSL Port

BOOLEAN





SSL Port

INTEGER





Subnet

Object - Subnet




"Id" IN (${Subnet${0}})

Firewall Rules

Object - Firewall Rule




"Id" IN (${Firewall Rules${0}})

SKU

TEXTAREA





Linked Servers

Object - Redis Cache




"Id" IN (${Linked Servers${0}})

Patch Schedules

TEXTAREA





Storage Account

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Type

TEXT





SKU Type

TEXT





Creation Time

DATE_TIME





last Geo Failover

DATE_TIME





Primary Account Status

STATUS





Secondary Account Status

STATUS





Provisioning

STATUS





Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Resource Group

Object - Resource Group




"Name" = ${Resource Group}

Region

Object - Region




"Name" = ${Region}

Subscription

Object - Subscription




"Id" = ${Subscription}

Tags

Object - Tag




"Id" IN (${Tags${0}})

Lock

Object - Lock




"Reference Id" = ${Lock}

Access Tier

TEXT





Access from Azure Services

BOOLEAN





Read Log Entries from any Network

BOOLEAN





Read Metrics from any Network

BOOLEAN





Access allowed from all networks

BOOLEAN





Custom Domain

TEXT





Encryption Key Source

TEXT





End Points

TEXTAREA





IP Addresses with access

TEXTAREA





Subnets with access

Object - Subnet




"Id" IN (${Subnet${0}})

Encryption Status

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Name

TEXT

(tick)




enabled

BOOLEAN





last enabled

DATE_TIME





Storage Account

Object - Storage Account

(tick)



"Id" = ${Storage Account}

Virtual Network

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Resource Group

Object - Resource Group




"Name" = ${Resource Group}

Region

Object - Region




"Name" = ${Region}

Subscription

Object - Subscription




"Id" = ${Subscription}

Tags

Object - Tag




"Id" IN (${Tags${0}})

Lock

Object - Lock




"Reference Id" = ${Lock}

Address Spaces

TEXT





DNS Server

TEXT





Subnets

Object - Subnet




"Reference Id" IN (${Subnet${0}})

Subnet

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Name

TEXT





Id

TEXT

(tick)




Address Prefix

TEXT





Subscription

Object - Subscription




"Id" = ${Subscription}

Virtual Network

Object - Virtual Network




"Id" = ${Virtual Network}

Network Security Group

Object - Network Security Group




"Id" = ${Network Security Group}

Route Table

Object - Route Table




"Id" = ${Route Table}

Service Endpoint

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Type

TEXT

(tick)




Subnet

Object - Subnet

(tick)



"Name" = ${Subnet}

Regions

Object - Region




"Name" IN (${Regions${0}})

Subscription

Object - Subscription




"Id" = ${Subscription}

Network Peering

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Status

STATUS





Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Resource Group

Object - Resource Group




"Name" = ${Resource Group}

Region

Object - Region




"Name" = ${Region}

Subscription

Object - Subscription




"Id" = ${Subscription}

Tags

Object - Tag




"Id" IN (${Tags${0}})

Lock

Object - Lock




"Reference Id" = ${Lock}

Virtual Network

Object - Virtual Network




"Id" = ${Virtual Network}

Remote Virtual Network

Object - Virtual Network




"Id" = ${Remote Virtual Network}

Gateway Use

TEXT





Access between Networks

BOOLEAN





Same Subscription

BOOLEAN





Traffic Forwarding from Remote Network allowed

BOOLEAN





Virtual Network Gateway

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Resource Group

Object - Resource Group




"Name" = ${Resource Group}

Region

Object - Region




"Name" = ${Region}

Subscription

Object - Subscription




"Id" = ${Subscription}

Tags

Object - Tag




"Id" IN (${Tags${0}})

Lock

Object - Lock




"Reference Id" = ${Lock}

Gateway Type

TEXT





VPN Type

TEXT





IP Configurations

Object - IP Configuration




"Name" IN (${IP Configurations${0}})

Active Active

BOOLEAN





BGP Enabled

BOOLEAN





BGP ASN

TEXT





Peer Weight

INTEGER





BGP Peering Address

TEXT





SKU Name

TEXT





SKU Tier

TEXT





SKU Capacity

INTEGER





VNG Connection

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Connection Status

STATUS





Provisioning

TEXT





Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Resource Group

Object - Resource Group




"Name" = ${Resource Group}

Region

Object - Region




"Name" = ${Region}

Subscription

Object - Subscription




"Id" = ${Subscription}

Tags

Object - Tag




"Id" IN (${Tags${0}})

Lock

Object - Lock




"Reference Id" = ${Lock}

Connection Type

TEXT





Authorization Key

TEXT





Source Network Gateway

Object - Virtual Network Gateway




"Id" = ${Source Network Gateway}

Destination Network Gateway

Object - Virtual Network Gateway




"Id" = ${Destination Network Gateway}

Egress Bytes Transferred

INTEGER





Ingress Bytes Transferred

INTEGER





BGP Enabled

BOOLEAN





Routing Weight

INTEGER





Shared Key

TEXT





Use Policy Based Traffic Selectors

BOOLEAN





Load Balancer

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Resource Group

Object - Resource Group




"Name" = ${Resource Group}

Region

Object - Region




"Name" = ${Region}

Subscription

Object - Subscription




"Id" = ${Subscription}

Tags

Object - Tag




"Id" IN (${Tags${0}})

Lock

Object - Lock




"Reference Id" = ${Lock}

SKU Type

TEXT





Network Security Group

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Resource Group

Object - Resource Group




"Name" = ${Resource Group}

Region

Object - Region




"Name" = ${Region}

Subscription

Object - Subscription




"Id" = ${Subscription}

Tags

Object - Tag




"Id" IN (${Tags${0}})

Lock

Object - Lock




"Reference Id" = ${Lock}

Security Rule

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Priority

INTEGER





Name

TEXT

(tick)




Direction

TEXT





Protocol

TEXT





Access

TEXT





Description

TEXT





Source Address Prefix

TEXT





Source Port Range

TEXT





Destination Address Prefix

TEXT





Destination Port Range

TEXT





Network Security Groups

Object - Network Security Group




"Id" IN (${Network Security Group${0}})

Firewall Rule

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Resource Group

Object - Resource Group




"Name" = ${Resource Group}

Region

Object - Region




"Name" = ${Region}

Subscription

Object - Subscription




"Id" = ${Subscription}

Tags

Object - Tag




"Id" IN (${Tags${0}})

Lock

Object - Lock




"Reference Id" = ${Lock}

Start IP Address

TEXT





End IP Address

TEXT





Route Table

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Resource Group

Object - Resource Group




"Name" = ${Resource Group}

Region

Object - Region




"Name" = ${Region}

Subscription

Object - Subscription




"Id" = ${Subscription}

Tags

Object - Tag




"Id" IN (${Tags${0}})

Lock

Object - Lock




"Reference Id" = ${Lock}

Route

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Name

TEXT

(tick)




Destination Address Prefix

TEXT





Next Hop Type

TEXT





Next Hop IP Address

TEXT





Route Table

Object - Route Table




"Id" IN (${Route Table${0}})

Network Interface

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Resource Group

Object - Resource Group




"Name" = ${Resource Group}

Region

Object - Region




"Name" = ${Region}

Subscription

Object - Subscription




"Id" = ${Subscription}

Tags

Object - Tag




"Id" IN (${Tags${0}})

Lock

Object - Lock




"Reference Id" = ${Lock}

DNS Name

TEXT





Domain Suffix

TEXT





FQDN

TEXT





DNS Server

TEXT





Accelerated Networking Enabled

BOOLEAN





IP Forwarding Enabled

BOOLEAN





MAC Address

TEXT





Primary Private IP

TEXT





Primary Private IP Allocation Method

TEXT





Virtual Machine

Object - Virtual Machine




"Id" = ${Virtual Machine}

Virtual Network

Object - Virtual Network




"Id" = ${Virtual Network}

Network Security Group

Object - Network Security Group




"Id" = ${Network Security Group}

IP Configuration

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Name

TEXT

(tick)




Primary Private IP

TEXT





Primary

BOOLEAN





IP Allocation Method

TEXT





IP Address Version

TEXT





Public IP Address

Object - Public IP Address




"Id" = ${Public IP Address}

Network Interface

Object - Network Interface

(tick)



"Id" = ${Network Interface}

Virtual Network

Object - Virtual Network




"Id" = ${Virtual Network}

Subnet

Object - Subnet




"Name" = ${Subnet}

Public IP Address

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Resource Group

Object - Resource Group




"Name" = ${Resource Group}

Region

Object - Region




"Name" = ${Region}

Subscription

Object - Subscription




"Id" = ${Subscription}

Tags

Object - Tag




"Id" IN (${Tags${0}})

Lock

Object - Lock




"Reference Id" = ${Lock}

FQDN

TEXT





Idle Timeout

INTEGER





IP Address

TEXT





IP Address Version

TEXT





IP Allocation Method

TEXT





Leaf Domain

TEXT





Reverse FQDN

TEXT





SKU Type

TEXT





Network Interface

Object - Network Interface




"Id" = ${Network Interface}

Inbound Nat Pool

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Subscription

Object - Subscription




"Id" = ${Subscription}

Protocol

TEXT





Backend Port

INTEGER





Frontend Port Range Start

INTEGER





Frontend Port Range End

INTEGER





Sql Server

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Status

TEXT





FQDN

TEXT





Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Resource Group

Object - Resource Group




"Name" = ${Resource Group}

Region

Object - Region




"Name" = ${Region}

Subscription

Object - Subscription




"Id" = ${Subscription}

Tags

Object - Tag




"Id" IN (${Tags${0}})

Lock

Object - Lock




"Reference Id" = ${Lock}

Version

TEXT





Sql Databases

Object - Sql Database




"Id" IN (${Sql Databases${0}})

Managed Service Identity

BOOLEAN





Automatic Tuning

Object - Automatic Tuning




"Id" = ${Automatic Tuning}

Sql Firewall Rules

Object - Firewall Rule




"Id" IN (${Sql Firewall Rules${0}})

Sql Database

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Status

TEXT





Database Id

TEXT

(tick)




Geo Id

TEXT

(tick)




Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Resource Group

Object - Resource Group




"Name" = ${Resource Group}

Region

Object - Region




"Name" = ${Region}

Subscription

Object - Subscription




"Id" = ${Subscription}

Tags

Object - Tag




"Id" IN (${Tags${0}})

Lock

Object - Lock




"Reference Id" = ${Lock}

Creation Time

DATE_TIME





Earliest Restore Date

DATE_TIME





Collation

TEXT





Edition

TEXT





Service Level

TEXT





Secondary Location

Object - Region




"Description" = ${Secondary Location}

Data Warehouse

BOOLEAN





Size

INTEGER





Transparent Data Encryption State

STATUS





Replication Role

TEXT





Automatic Tuning

Object - Automatic Tuning




"Id" = ${Automatic Tuning}

Threat Detection Policy

Object - Threat Detection Policy




"Id" = ${Threat Detection Policy}

Replication Links

Object - Replication Link




"Id" IN (${Replication Links${0}})

Threat Detection Policy

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Status

STATUS





Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Resource Group

Object - Resource Group




"Name" = ${Resource Group}

Region

Object - Region




"Name" = ${Region}

Subscription

Object - Subscription




"Id" = ${Subscription}

Tags

Object - Tag




"Id" IN (${Tags${0}})

Lock

Object - Lock




"Reference Id" = ${Lock}

Disabled Alerts

TEXTAREA





EMail Account Admins

BOOLEAN





EMail Addresses

TEXTAREA





Default Security Alert Policy

BOOLEAN





Retention Days

INTEGER





Storage Account Access Key

TEXTAREA





Storage Endpoint

TEXTAREA





Storage Endpoint

TEXTAREA





Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Resource Group

Object - Resource Group




"Name" = ${Resource Group}

Subscription

Object - Subscription




"Id" = ${Subscription}

Lock

Object - Lock




"Reference Id" = ${Lock}

Termination Allowed

BOOLEAN





Replication State

STATUS





Replication Mode

TEXT





Start Time

DATE_TIME





Percent Complete

INTEGER





Replication Databases

Object - Sql Database




"Geo Id" IN (${Replication Databases${0}})

Automatic Tuning

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Actual State

TEXT





Desired State

TEXT





Automatic Tuning Options

Object - Automatic Tuning Option




"Id" IN (${Automatic Tuning Options${0}})

Subscription

Object - Subscription




"Id" = ${Subscription}

Automatic Tuning Option

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Actual State

TEXT





Desired State

TEXT





App Service plan

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Status

STATUS





Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Resource Group

Object - Resource Group




"Name" = ${Resource Group}

Region

Object - Region




"Name" = ${Region}

Subscription

Object - Subscription




"Id" = ${Subscription}

Tags

Object - Tag




"Id" IN (${Tags${0}})

Lock

Object - Lock




"Reference Id" = ${Lock}

Capacity

INTEGER





Max Instances

INTEGER





Number of WebApps

INTEGER





Per Site scaling

BOOLEAN





Pricing Tier

TEXT





Operating System

TEXT





App Service

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Status

TEXT





Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Resource Group

Object - Resource Group




"Name" = ${Resource Group}

Region

Object - Region




"Name" = ${Region}

Subscription

Object - Subscription




"Id" = ${Subscription}

Tags

Object - Tag




"Id" IN (${Tags${0}})

Lock

Object - Lock




"Reference Id" = ${Lock}

Default Hostname

TEXT





enabled

BOOLEAN





App Service plan

Object - App Service plan




"Id" = ${App Service plan}

SCM Type

TEXT





SCM stopped

BOOLEAN





Operating System

TEXT





Platform Architecture

TEXT





Repository Sitename

TEXT





Usage State

TEXT





Site Availability State

TEXT





FTPS State

TEXT





Client Affinity enabled

BOOLEAN





Client Certificate enabled

BOOLEAN





Host Names disabled

BOOLEAN





Outbound IP Addresses

TEXTAREA





Container size

INTEGER





Default Container

BOOLEAN





Default Documents

TEXTAREA





Java Container

TEXTAREA





Dot Net Framework Version

TEXTAREA





PHP Version

TEXTAREA





Python Version

TEXTAREA





Node Version

TEXTAREA





Java Version

TEXTAREA





Java Container Version

TEXTAREA





Remote Debugging Version

TEXTAREA





Linux FX Version

TEXTAREA





Remote Debugging enabled

BOOLEAN





Web Sockets enabled

BOOLEAN





Always On

BOOLEAN





HTTPS only

BOOLEAN





HTTP 20 enabled

BOOLEAN





Local MySql enabled

BOOLEAN





Certificate

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Resource Group

Object - Resource Group




"Name" = ${Resource Group}

Region

Object - Region




"Name" = ${Region}

Subscription

Object - Subscription




"Id" = ${Subscription}

Tags

Object - Tag




"Id" IN (${Tags${0}})

Lock

Object - Lock




"Reference Id" = ${Lock}

Valid

BOOLEAN





Friendly Name

TEXT





Subject Name

TEXT





Site Name

TEXT





Host Names

TEXTAREA





Self Link

TEXT





Issuer

TEXT





Issue Date

DATE_TIME





Expiration Date

DATE_TIME





Thumbprint

TEXT





Public Key Hash

TEXT





Device

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Subscription

Object - Subscription




"Id" = ${Subscription}

Trust Type

TEXT



Type of trust for the joined device.


Profile Type

TEXT



The profile type of the device.


Device Version

INTEGER





MDM App Id

TEXT



Application identifier used to register device into MDM.


System Labels

TEXTAREA



Labels applied to the device by the system.


Physical Ids

TEXTAREA





Operating System

TEXT



The type of operating system on the device.


Operating System Version

TEXT



The version of the operating system on the device.


Account enabled

BOOLEAN





Compliant

BOOLEAN



True if the device complies with Mobile Device Management (MDM) policies.


MDM managed

BOOLEAN



True if the device is managed by a Mobile Device Management (MDM) app.


On Premises sync enabled

BOOLEAN



True if this object is synced from an on-premises directory.


Approximate last sign in

DATE_TIME





Compliance expiration

DATE_TIME



The time when the device is no longer deemed compliant.


On Premises last sync

DATE_TIME



The last time at which the object was synced with the on-premises directory.


Groups

Object - Group



The groups that the device is a member of.

"Id" IN (${Groups${0}})

Registered Owners

Object - User



The users that cloud joined the device or registered their personal device.

"Id" IN (${Registered Owners${0}})

Registered Users

Object - User



Registered users of the device.

"Id" IN (${Registered Users${0}})

Managed Device

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Subscription

Object - Subscription




"Id" = ${Subscription}

Managed Device Name

TEXT



Automatically generated name to identify a device. Can be overwritten to a user friendly name.


Device Category

TEXT



Device category.


Owner Type

TEXT



Ownership of the device.


Model

TEXT



Model of the device.


Manufacturer

TEXT



Manufacturer of the device.


Serial Number

TEXT



Serialnumber of the device.


Phone Number

TEXT



Phone number of the device.


IMEI

TEXT



IMEI of the device.


MEID

TEXT



MEID of the device.


Wi-Fi MAC Address

TEXT



Wi-Fi MAC.


Subscriber Carrier

TEXT



Subscriber Carrier.


Operating System

TEXT



The type of operating system on the device.


Operating System Version

TEXT



The version of the operating system on the device.


Jail Broken

TEXT



Whether the device is jail broken or rooted.


Last sync

DATE_TIME



The date and time that the device last completed a successful sync with Intune.


Enrolled

DATE_TIME



Enrollment time of the device.


EAS activation

DATE_TIME



Exchange ActivationSync activation time of the device.


Exchange last successful sync

DATE_TIME



Last time the device contacted Exchange.


Compliance Grace Period Expiration

DATE_TIME



The DateTime when device compliance grace period expires.


Management Agent

TEXT



Management channel of the device.


Device Enrollment Type

TEXT



Enrollment type of the device.


Activation Lock Bypass Code

TEXT



Code that allows the Activation Lock on a device to be bypassed.


EMail Addresses

TEXT



Email(s) for the user associated with the device.


Device Registration State

TEXT



Device registration state.


Exchange Access State

TEXT



The Access State of the device in Exchange.


Exchange Access State Reason

TEXT



The reason for the device's access state in Exchange.


Android security patch level

TEXT



Android security patch level.


Partner Reported Health State

TEXT



Indicates the threat state of a device when a Mobile Threat Defense partner is in use by the account and device.


Remote Assistance Session Url

URL



Url that allows a Remote Assistance session to be established with the device.


Remote Assistance Session Error Detail

TEXT



An error string that identifies issues when creating Remote Assistance session objects.


EAS activated

BOOLEAN



Whether the device is Exchange ActiveSync activated.


AD registered

BOOLEAN



Whether the device is Azure Active Directory registered.


Supervised

BOOLEAN



Device supervised status.


Encrypted

BOOLEAN



Device encryption status.


Total Storage space

INTEGER



Total Storage of the device.


Free Storage space

INTEGER



Free Storage of the device.


User

Object - User



The user associated with the device.

"Id" = ${User}

Device

Object - Device



The Azure Active Directory device.

"Id" = ${Device}

Service Bus

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Resource Group

Object - Resource Group




"Name" = ${Resource Group}

Region

Object - Region




"Name" = ${Region}

Subscription

Object - Subscription




"Id" = ${Subscription}

Tags

Object - Tag




"Id" IN (${Tags${0}})

Lock

Object - Lock




"Reference Id" = ${Lock}

Creation Time

DATE_TIME





Update Time

DATE_TIME





FQDN

TEXT





DNS Name

TEXT





Authorization Rules

Object - Authorization Rule



The Authorization Rules that belongs to the Service Bus.

"Id" IN (${Authorization Rules${0}})

Topics

Object - Topic



The Topics that belongs to the Service Bus.

"Id" IN (${Topics${0}})

Queue

Object - Queue



The Queue that belongs to the Service Bus.

"Id" IN (${Queues${0}})

Authorization Rule

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Subscription

Object - Subscription




"Id" = ${Subscription}

Rights

TEXT





Topic

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Status

STATUS





Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Subscription

Object - Subscription




"Id" = ${Subscription}

Creation Time

DATE_TIME





Update Time

DATE_TIME





Access Time

DATE_TIME





Max size

INTEGER





Current size

INTEGER





Batched Operations

BOOLEAN





Express

BOOLEAN





Partitioning

BOOLEAN





Duplicate Detection

BOOLEAN





Delete on idle duration

INTEGER





Default message TTL duration

TEXT





Duplicate message detection history duration

TEXT





Active message count

INTEGER





Transfer message count

INTEGER





Dead letter message count

INTEGER





Transfer dead letter message count

INTEGER





Scheduled message count

INTEGER





Subscription count

INTEGER





Queue

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Status

STATUS





Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Subscription

Object - Subscription




"Id" = ${Subscription}

Creation Time

DATE_TIME





Update Time

DATE_TIME





Access Time

DATE_TIME





Max size

INTEGER





Current size

INTEGER





Batched Operations

BOOLEAN





Express

BOOLEAN





Partitioning

BOOLEAN





Duplicate Detection

BOOLEAN





Delete on idle duration

INTEGER





Default message TTL duration

TEXT





Duplicate message detection history duration

TEXT





Active message count

INTEGER





Transfer message count

INTEGER





Dead letter message count

INTEGER





Transfer dead letter message count

INTEGER





Scheduled message count

INTEGER





Message count

INTEGER





Max delivery count before dead lettering message

INTEGER





Lock duration

INTEGER





Dead lettering enabled for expired messages

BOOLEAN





Session

BOOLEAN





Container Registry

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Resource Group

Object - Resource Group




"Name" = ${Resource Group}

Region

Object - Region




"Name" = ${Region}

Subscription

Object - Subscription




"Id" = ${Subscription}

Tags

Object - Tag




"Id" IN (${Tags${0}})

Lock

Object - Lock




"Reference Id" = ${Lock}

SKU Name

TEXT





SKU Tier

TEXT





Creation Time

DATE





Login Server Url

URL





Admin User enabled

BOOLEAN





Storage Account

Object - Storage Account



The storage account associated with the container registry.

"Id" = ${Storage Account}

Container Group

Attribute

Default Type

Default Identifier

Unique

Description

IQL

State

TEXT





Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Resource Group

Object - Resource Group




"Name" = ${Resource Group}

Region

Object - Region




"Name" = ${Region}

Subscription

Object - Subscription




"Id" = ${Subscription}

Tags

Object - Tag




"Id" IN (${Tags${0}})

Lock

Object - Lock




"Reference Id" = ${Lock}

Provisioning

TEXT





DNS Prefix

TEXT





FQDN

TEXT





IP Address

TEXT





IP Address Public

BOOLEAN





OS Type

TEXT





External TCP Ports

TEXT





External UDP Ports

TEXT





Volumes

TEXTAREA





Image Registry Servers

TEXTAREA





Container Instances

Object - Container Instance



The Container Instances that belongs to the Container Group.

"Id" IN (${Container Instances${0}})

Container Instance

Attribute

Default Type

Default Identifier

Unique

Description

IQL

State

TEXT





Previous State

TEXT





Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Subscription

Object - Subscription




"Id" = ${Subscription}

Image

TEXT





Commands

TEXTAREA





External TCP Ports

TEXT





External UDP Ports

TEXT





Restart Count

INTEGER





MAX CPU Value

DOUBLE





Max Memory

DOUBLE





Environment Variables

Object - Environment Variable



The Environment Variables that belongs to the Container Instance.

"Id" IN (${Environment Variables${0}})

Volume Mounts

Object - Volume Mount



The Volume Mounts that belongs to the Container Instance.

"Id" IN (${Volume Mounts${0}})

Environment Variable

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Subscription

Object - Subscription




"Id" = ${Subscription}

Value

TEXT





Secure Value

TEXT





Volume Mount

Attribute

Default Type

Default Identifier

Unique

Description

IQL

Id

TEXT

(tick)




Name

TEXT





Type

TEXT





Subscription

Object - Subscription




"Id" = ${Subscription}

Mount Path

TEXT





Read Only

BOOLEAN