Search Knowledge Base by Keyword
Ivanti (Landesk)
Overview
Ivanti Endpoint Manager, still widely known by its former name LANDESK Management Suite, is an agent-based endpoint management platform. An agent on each Windows, macOS, Linux or mobile device runs scheduled hardware and software inventory scans, patch and vulnerability scans, antivirus checks and software distribution tasks, and reports the results back to an Ivanti core server. Everything the agent reports lands in the core server’s Microsoft SQL Server database, in tables such as Computer, Operating_System, BIOS, Memory, Processor, Product, MP_ComputerPatch, OSUpdates and AntiVirus.
The ReadyWorks connector reads that core database directly. It offers a single authentication method driven by the mssql.php driver: you supply the SQL Server host name, the port (1433 by default), the name of the Ivanti core database, and a database account with read access. There is no API call and no Ivanti console involvement. Each job carries its own SQL statement in the Data Selection field, ReadyWorks executes that statement against the core database and writes the result set into the staging table named on the job.
Because Ivanti holds both the physical detail of a device and its security state, this connector gives the ReadyWorks estate fabric several things at once: manufacturer, model, BIOS, memory and processor detail for refresh and Windows readiness assessment, a full installed-software list for application rationalisation, patch and vulnerability detection records, antivirus posture including definition age and overdue scans, and the per-device last-scan timestamps that tell you which Ivanti records are stale enough to stop trusting. Reconciled against HR, Active Directory and a CMDB, that is enough to build migration waves and to find devices that Ivanti believes exist but has not heard from in months.
NOTE: Five of the shipped jobs come as a pair, a compact version with a curated column list and an Expanded version that returns close to every column on the underlying tables. Device Information Expanded alone returns around 170 columns. Run the compact version unless you have a specific need for the extra fields, since the Expanded variants are heavier to extract and heavier to keep indexed.
The connector is inbound only. It defines no outbound job fields and ships no outbound templates, so ReadyWorks never writes back to the Ivanti core database. Anything you want acted on in Ivanti has to leave ReadyWorks by another route.
Connector Properties
| Property | Value |
|---|---|
| Identifier | IVANTI |
| Name | Ivanti (Landesk) |
| Description | Connector for processing Ivanti (formerly Landesk) data. |
| Job Types | Inbound Only |
| Order | 140 |
| Enabled | Yes |
| Locked | Yes |
| Block Update | No |
| Single Authentication | No |
| Windows Only | No |
| Connector Version | 2025-03-12 |
| Hooks | None |
| Additional Job Fields | None |
| Image |
Authentication Methods
Ivanti offers one authentication method. It is a direct Microsoft SQL Server connection to the Ivanti core database using a SQL or Windows account supplied on the connection.
| Method | Identifier | Base Method | Script | Order | Enabled | Config Fields |
|---|---|---|---|---|---|---|
| LANDESK | IVANTI_MS SQL |
MS SQL_user |
mssql.php |
10 | Yes | 5 |
Method 1: LANDESK (IVANTI_MS SQL)
Connect to an Ivanti MS SQL Connector
A standard SQL Server login against the Ivanti core database. You give the source server, the port (pre-filled with 1433 and validated as a number below 65536), the core database name, and the username and password of the database account. The mssql.php driver authenticates natively, so there is no stored authentication recipe, no token exchange and no header configuration to maintain. All five fields are required. Grant the account read access only: every shipped job is a SELECT, and nothing in this connector writes to Ivanti.
Connection Configuration Fields (5)
| Order | Label | Type | Required | Default | Max Len | Tooltip |
|---|---|---|---|---|---|---|
| 10 | Source Server | text | Yes | 255 | Enter name of the source server | |
| 20 | Source Server Port | text | Yes | 1433 |
5 | Enter port number of the source server |
| 30 | Source DB Name | text | Yes | 255 | Enter name of the source database | |
| 40 | Username | text | Yes | 1024 | Enter username of the database account | |
| 50 | Password | password | Yes | 64000 | Enter password of the database account |
No authentication recipe is stored. The driver script authenticates natively using the fields above.
NOTE: Point the connection at the Ivanti core database, not at a reporting replica that omits tables. Several shipped jobs read tables outside the common reporting set, including SLM_ComputerGroup, PMCollections, PACKAGE_RELATIONSHIPS and UserManagementView.
Inbound Job Fields Enabled (13)
Ivanti inbound jobs expose the standard scheduling and destination fields plus the Data Selection box that holds the SQL statement the job runs.
| Order | Label | Type | Required | Default | Tooltip |
|---|---|---|---|---|---|
| 10 | Job Description | text | Yes | Enter description of the Job | |
| 20 | Job Schedule | lookup | Yes | Daily | Select frequency Job should run |
| 30 | Enabled | radio | Yes | Yes | Choose if Job is enabled |
| 60 | Allow Empty Table | radio | Yes | Yes | Choose if an empty table is allowed |
| 70 | Destination Table | text | Yes | Enter name of the destination table | |
| 80 | Data Identity | text | No | Enter identity of the Job | |
| 90 | Data Selection | textarea | No | Enter connector specific data selection command of the Job | |
| 120 | Append New Data to Existing Tables | radio | No | No | Choose if new data will append to the existing destination table, or will create a new destination table |
| 130 | Fields to Index | text | No | Enter fields to index | |
| 150 | Request Unique Key Field | text | No | Enter request unique field key of the Job | |
| 160 | Request Sort By Field | text | No | Enter field to sort by | |
| 290 | Request Limit | text | No | Enter request limit of the Job | |
| 560 | Order | text | Yes | Enter order of the Job |
NOTE: Data Selection is marked optional on the form, but this is a SQL connector and a job with an empty Data Selection has nothing to execute. Every shipped template supplies one; any job you add yourself must too.
NOTE: Request Limit, Request Unique Key Field and Request Sort By Field are exposed on the job form, but no shipped template sets them. Row limiting and ordering in the shipped jobs are done inside the SQL itself.
Inbound Job Templates (18)
Eighteen inbound jobs ship with the connector, each one a SQL statement against the Ivanti core database. They cover device hardware and operating system detail, installed software, patch and vulnerability state, antivirus posture, scan freshness, groups and distribution packages. Five subjects appear twice, once as a compact job and once as an Expanded job returning the full underlying column set.
| # | Job Description | Destination Table | API End Point | Enabled | What It Pulls |
|---|---|---|---|---|---|
| 1 | Device Information | Device_Information |
Not set |
No | The core device record, joining Computer to Operating_System, BIOS, Memory, Processor and OSNT. Returns device and computer name, chassis type, manufacturer, model and model number, BIOS date and SMBIOS version, total RAM in GB, processor type, socket count, cores per package and hyper-threading state, a calculated total core count, OS type and version, and last start-up time. |
| 2 | MS SQL Table Data | mssql_data |
Not set |
No | A generic passthrough job holding the statement SELECT * FROM {tablename}. It is a starting point you edit to point at any table in the Ivanti core database that the shipped jobs do not cover. |
| 3 | Malware Status | Malware_Status |
Not set |
No | Antivirus and anti-malware action records per device from AutomateAction: the date of each action, the user account in context, the action code and the action taken, a description, the malware type and the raw log text. |
| 4 | Installed Applications | Installed_Applications |
Not set |
No | Per-device software inventory from the Product catalogue joined through ProductComputer. One row per product installed on a device, with program title, version, publisher and the date the product was first discovered on that device. |
| 5 | Windows Device Patch Information | Windows_Patch_Information |
Not set |
No | Per-device patch and vulnerability detection records from MP_ComputerPatch: the vulnerability ID, whether it was detected, the last scan date, the patch identified, the reason, the expected and found values, the detection date, and the patch install date, status and success flag. |
| 6 | User Device Affinity | User_Device_Affinity |
Not set |
No | Ivanti console user administration data from UserManagementView: user name, last login, user type, the time-of-day and day-of-week access window applied to the account, the authentication server, and the group, role, scope and team the account belongs to. |
| 7 | Device Last Check-in | Device_Last_Check_In |
Not set |
No | The complete set of per-device last-scan timestamps held on the Computer row: hardware, software, mini, vulnerability, spyware, security, update, user-defined, blocked, patch software, patch drivers, patch antivirus, compliance, software package and WMI scan dates, plus record date, last logon date and the mobile enrolment and sync dates. This is the job that tells you how stale each Ivanti record is. |
| 8 | Collection Inventory | Collection_Inventory |
Not set |
No | The software licence monitoring computer groups from SLM_ComputerGroup, with the group name and type, its allocation, and the name of the saved query or custom device group each one is built from. |
| 9 | Collection Membership | Collection_Membership |
Not set |
No | The Patch Manager collection list from PMCollections: internal collection ID, collection name and collection type. |
| 10 | App and OS Deployment Status | App_OS_Deployement_Status |
Not set |
No | Operating system updates recorded as installed on each device, from OSUpdates: update name, version, publisher and install date, with the install date cast to a real date where the stored value can be parsed. |
| 11 | Package Inventory | Package_Inventory |
Not set |
No | The discovered software product catalogue from Product, independent of any device. Returns product ID, title, version, publisher, product GUID, main executable, target OS, file matching rule, discovery date, ignore flag, data source type, and the links to manufacturer, licence suite, custom group and query. |
| 12 | Package Collection Affinity | Package_Collection_Affinity |
Not set |
No | The relationship rows between software distribution packages from PACKAGE_RELATIONSHIPS, resolved to the package name: which package is related to which, and the relationship type. |
| 13 | Antivirus Checks | Antivirus_Checks |
Not set |
No | Per-device antivirus posture from the AntiVirus table: product name and version, engine and definition versions, definition publish and install dates, last virus scan, last full scan and last quick scan times, pattern server, licence expiry, period, number and maximum count, and the status flags for agent running, reboot required, definitions out of date, full scan required, and quick or full scan overdue. |
| 14 | Device Information Expanded | Device_Information_Expanded |
Not set |
No | The wide form of Device Information, returning close to every column across Computer, Operating_System, BIOS, Memory, Processor and OSNT. Adds asset tag and service tag, monitor make, model, size and serial, UEFI and Secure Boot state, LDAP and computer location, owner phone and email, virtual machine identity, MDM ID, tenant and cloud tenant identifiers, the per-scan age-in-days counters, full memory and paging figures, the complete processor feature set, and OS build, release ID, UBR, update channel and display version. |
| 15 | Malware Status Expanded | Malware_Status_Expanded |
Not set |
No | The same AutomateAction records as Malware Status, with the AutomateAction row identifier added so individual action records can be tracked between runs. |
| 16 | Windows Device Patch Information Expanded | Windows_Patch_Information_Expanded |
Not set |
No | The same MP_ComputerPatch records as the compact patch job, with the record ID and Computer_IDN added so patch detections can be keyed back to the Ivanti row rather than matched on device name. |
| 17 | Collection Inventory Expanded | Collection_Inventory_Expanded |
Not set |
No | The SLM computer groups joined to the complete Query and CustomGroup definition rows: the stored query SQL and filter, query type, revision, GUID, source core, sync flag, notes, owner and last saved by and date for both the query and the custom group, plus the custom group hierarchy parent. |
| 18 | App and OS Deployment Status Expanded | App_OS_Deployement_Status_Expanded |
Not set |
No | The same installed OS update records as the compact job, with the Computer_Idn and OSUpdates_Idn keys added and the install date returned as stored rather than cast to a date. |
Job Template Configuration
Settings Common to All Eighteen Templates
| Setting | Value |
|---|---|
| Enabled | No |
| Job Schedule | Daily (15 1 * * *) |
| Allow Empty Table | Yes |
| Append Files to Same Destination Table | No |
| Append New Data to Existing Tables | No |
| Use Unparsed Data | No |
| Convert UUID-Keyed Objects to Rows | No |
| Ignore XML Attributes | No |
| Log Raw API Calls | No |
| Method Type | GET |
| Body Data Sending Method | JSON Encoded Data |
Settings That Vary by Template
| Template | ID | Order | Destination Table | Data Identity | Fields to Index |
|---|---|---|---|---|---|
| Device Information | 34 | 10 | Device_Information |
Device_Information |
Device_Name, Computer_Name |
| MS SQL Table Data | 35 | 10 | mssql_data |
mssql_data |
Not set |
| Malware Status | 44 | 20 | Malware_Status |
Malware_Status |
Device_Name |
| Installed Applications | 45 | 30 | Installed_Applications |
Installed_Applications |
Device_Name, Program_Title |
| Windows Device Patch Information | 46 | 40 | Windows_Patch_Information |
Windows_Patch_Information |
Device_Name |
| User Device Affinity | 47 | 50 | User_Device_Affinity |
User_Device_Affinity |
Username |
| Device Last Check-in | 48 | 60 | Device_Last_Check_In |
Device_Last_Check_In |
Device_Name |
| Collection Inventory | 49 | 70 | Collection_Inventory |
Collection_Inventory |
Not set |
| Collection Membership | 50 | 80 | Collection_Membership |
Collection_Membership |
Name |
| App and OS Deployment Status | 51 | 90 | App_OS_Deployement_Status |
App_OS_Deployement_Status |
Device_Name, Update_Name |
| Package Inventory | 36 | 100 | Package_Inventory |
Package_Inventory |
Title, Publisher |
| Package Collection Affinity | 37 | 110 | Package_Collection_Affinity |
Package_Collection_Affinity |
Package_Name |
| Antivirus Checks | 38 | 120 | Antivirus_Checks |
Antivirus_Checks |
Device_Name, Product_Name, Is_Agent_Running, Is_Definition_Out_Of_Date, Is_Fullscan_Required, Is_Quick_Scan_Overdue, Is_Full_Scan_Overdue |
| Device Information Expanded | 39 | 130 | Device_Information_Expanded |
Device_Information_Expanded |
Device_Name, Computer_Name |
| Malware Status Expanded | 40 | 140 | Malware_Status_Expanded |
Malware_Status_Expanded |
Device_Name |
| Windows Device Patch Information Expanded | 41 | 150 | Windows_Patch_Information_Expanded |
Windows_Patch_Information_Expanded |
Device_Name |
| Collection Inventory Expanded | 42 | 160 | Collection_Inventory_Expanded |
Collection_Inventory_Expanded |
Not set |
| App and OS Deployment Status Expanded | 43 | 170 | App_OS_Deployement_Status_Expanded |
App_OS_Deployement_Status_Expanded |
Device_Name, Update_Name |
Job Parameters and Enumeration
Device Information
Data Selection:
SELECT c.DeviceName AS Device_Name , c.ComputerName AS Computer_Name , c.Type AS Computer_Type , c.Manufacturer , c.Model , c.ModelNum AS Model_Number , b.BiosDate AS Bios_Date , b.SMBIOSVer AS Sm_Bios_Ver , m.BytesTotal / 1024. AS Total_Gb_Ram , p.Type AS Processor_Type , p.ProcCount AS Processor_Count , p.CoresPerPkg AS Cores_Per_Package , p.HyperThreading AS Hyper_Threading , p.ProcCount * p.CoresPerPkg * CASE WHEN p.HyperThreading = 'Yes' THEN 2 ELSE 1 END AS Total_Cores , os.OSType AS OS_Type , os.Version AS OS_Version , os.LastStartUpTime AS Last_Start_Up_Time FROM dbo.Computer AS c INNER JOIN dbo.Operating_System AS os ON c.Computer_Idn = os.Computer_Idn INNER JOIN dbo.BIOS AS b ON c.Computer_Idn = b.Computer_Idn INNER JOIN dbo.Memory AS m ON c.Computer_Idn = m.Computer_Idn INNER JOIN dbo.Processor AS p ON c.Computer_Idn = p.Computer_Idn INNER JOIN dbo.OSNT AS o ON os.Computer_Idn = o.Computer_Idn AND os.Operating_System_Idn = o.Operating_System_Idn
MS SQL Table Data
Data Selection: SELECT * FROM {tablename}
Malware Status
Data Selection:
SELECT c.DeviceName AS Device_Name , aa.ActionDate AS Action_Date , aa.UserName AS User_Name , aa.ActionCode AS Action_Code , aa.ActionTaken AS Action_Taken , aa.Description , aa.MalwareType AS Malware_Type , aa.LogInfo AS Log_Info FROM dbo.Computer AS c INNER JOIN dbo.AutomateAction AS aa ON c.Computer_Idn = aa.Computer_Idn
Installed Applications
Data Selection:
SELECT c.DeviceName AS Device_Name , p.Title AS Program_Title , p.Version , p.Publisher , p.Discovered AS Date_Discovered FROM dbo.Computer AS c INNER JOIN dbo.ProductComputer AS pc ON c.Computer_Idn = pc.Computer_Idn INNER JOIN dbo.Product AS p ON pc.Product_Idn = p.Product_Idn ORDER BY c.Computer_Idn, p.Title
Windows Device Patch Information
Data Selection:
SELECT c.DeviceName AS Device_Name , mcp.Vul_ID , mcp.Detected , mcp.Lang , mcp.LastScanDate AS Last_Scan_Date , mcp.Patch , mcp.Reason , mcp.Expected , mcp.Found , mcp.DateDetected AS Date_Detected , mcp.PatchInstallSucceeded AS Patch_Install_Succeeded , mcp.PatchDetected AS Patch_Detected , mcp.PatchDetectedDate AS Patch_Detected_Date , mcp.PatchInstallDate AS Patch_Install_Date , mcp.PatchInstallStatus AS Patch_Install_Status , mcp.Updated FROM dbo.Computer AS c INNER JOIN dbo.MP_ComputerPatch AS mcp ON c.Computer_Idn = mcp.Computer_IDN
User Device Affinity
Data Selection:
SELECT umv.UserName , umv.LastLogin AS Last_Login , umv.UserType AS User_Type , umv.UseTimeFilter AS Use_Time_Filter , umv.StartHour AS Start_Hour , umv.StopHour AS Stop_Hour , umv.OnSunday AS On_Sunday , umv.OnMonday AS On_Monday , umv.OnTuesday AS On_Tuesday , umv.OnWednesday AS On_Wednesday , umv.OnThursday AS On_Thursday , umv.OnFriday AS On_Friday , umv.OnSaturday AS On_Saturday , umv.AuthServer AS Auth_Server , umv.GroupName AS Group_Name , umv.RoleName AS Role_Name , umv.ScopeName AS Scope_Name , umv.TeamName AS Team_Name , umv.ConsoleUser_Idn AS Console_User_Idn FROM dbo.UserManagementView AS umv
Device Last Check-in
Data Selection:
SELECT c.DeviceName AS Device_Name , c.HWLastScanDate AS Hw_Last_Scan_Date , c.SWLastScanDate AS Sw_Last_Scan_Date , c.MINILastScanDate AS Mini_Last_Scan_Date , c.VALastScanDate AS Va_Last_Scan_Date , c.SpywareLastScanDate AS Spyware_Last_Scan_Date , c.SecurityLastScanDate AS Security_Last_Scan_Date , c.UpdateLastScanDate AS Update_Last_Scan_Date , c.UserDefinedLastScanDate AS User_Defined_Last_Scan_Date , c.BlockedLastScanDate AS Blocked_Last_Scan_Date , c.PatchSWLastScanDate AS Patch_Sw_Last_Scan_Date , c.PatchDriversLastScanDate AS Patch_Drivers_Last_Scan_Date , c.PatchAVLastScanDate AS Patch_Av_Last_Scan_Date , c.ComplianceLastScanDate AS Compliance_Last_Scan_Date , c.SWPackageLastScanDate AS Sw_Package_Last_Scan_Date , c.RecordDate AS Record_Date , c.LastLogonDate AS Last_Logon_Date , c.LastEnrollmentDateExt AS Last_Enrollment_Date_Ext , c.LastSyncDateExt AS Last_Sync_Date_Ext , c.LastWMIScanDate AS Last_Wmi_Scan_Date FROM dbo.Computer AS c
Collection Inventory
Data Selection:
SELECT cg.SLM_ComputerGroup_Idn AS Slm_Computer_Group_Idn , cg.GroupName AS Group_Name , cg.GroupType AS Group_Type , cg.DeviceGroupId AS Device_Group_Id , cg.QueryId AS Query_Id , cg.Allocation , q.Name AS Query_Name , cug.Name AS Device_Group_Name FROM dbo.SLM_ComputerGroup AS cg LEFT JOIN dbo.Query AS q ON q.Query_Idn = cg.QueryId LEFT JOIN dbo.CustomGroup AS cug ON cug.CustomGroup_Idn = cg.DeviceGroupId
Collection Membership
Data Selection:
SELECT pc.PMCollections_Idn , pc.Name , pc.Type FROM dbo.PMCollections AS pc
App and OS Deployment Status
Data Selection:
SELECT c.DeviceName AS Device_Name , ou.UpdateName AS Update_Name , ou.Version , ou.Publisher , COALESCE(TRY_CAST(ou.InstallDate AS DATE), ou.InstallDate) AS Install_Date FROM dbo.Computer AS c INNER JOIN dbo.OSUpdates AS ou ON c.Computer_Idn = ou.Computer_Idn
Package Inventory
Data Selection:
SELECT p.Product_Idn , p.Title , p.Version , p.Publisher , p.Action , p.FileMatching AS File_Matching , p.ProductGUID AS Product_Guid , p.LDMSProduct AS Ldms_Product , p.Discovered AS Date_Discovered , p.Ignore , p.Manufacturer_Idn , p.LicenseSuite_Idn , p.MainExe AS Main_Exe , p.OS , p.DataSourceType AS Datasource_Type , p.OriginalID AS Original_Id , p.Orig_Manufacturer_Idn AS Original_Manufacturer_Idn , p.CustomGroupIdn AS Customer_Group_Idn , p.QueryIdn AS Query_Idn , p.DADefined AS Da_Defined FROM dbo.Product AS p
Package Collection Affinity
Data Selection:
SELECT pr.PACKAGE_RELATIONSHIPS_IDN AS Package_Relationships_Idn , pr.PACKAGE_IDN AS Package_Idn , pr.RELATIONSHIP_IDN AS Relationship_Idn , pr.TYPE , p.NAME AS Package_Name FROM dbo.PACKAGE_RELATIONSHIPS AS pr LEFT JOIN dbo.PACKAGE AS p ON pr.PACKAGE_IDN = p.PACKAGE_IDN
Antivirus Checks
Data Selection:
-- Anti-Virus checks SELECT c.DeviceName AS Device_Name , av.AntiVirus_Idn AS Antivirus_Idn , av.AntiVirusNo AS AntiVirus_No , av.ProductName AS Product_Name , av.AutoProtect AS Auto_Protect , av.ProductVersion AS Product_Version , av.EngineVersion AS Engine_Version , av.DefVersion AS Definition_Version , av.PubDate AS Publish_Date , av.DefInstDate AS Definition_Installation_Date , av.LastVirusScan AS Last_Virus_Scan , av.LastFullVirusScan AS Last_Full_Virus_Scan , av.LastQuickVirusScan AS Last_Quick_Virus_Scan , av.AgentRunning AS Is_Agent_Running , av.PatternServer AS Pattern_Server , av.LicenseExpirationDate AS License_Expiration_Date , av.LicensePeriod AS License_Period , av.LicenseNumber AS License_Number , av.LicenseProductName AS License_Product_Name , av.LicenseMaxCount AS License_Max_Count , av.StartFullVirusScan AS Start_Full_Virus_Scan , av.StartQuickVirusScan AS Start_Quick_Virus_Scan , av.FullVirusScanCancelled AS Full_Virus_Scan_Cancelled , av.QuickVirusScanCancelled AS Quick_Virus_Scan_Cancelled , av.EngineState AS Engine_State , av.NetworkProtection AS Network_Protection , av.QuickScanLastDefVersion AS Quick_Scan_Last_Definition_Version , av.FullScanLastDefVersion AS Full_Scan_Last_Definition_Version , av.RebootRequired AS Is_Reboot_Required , av.DefinitionOutOfDate AS Is_Definition_Out_Of_Date , av.FullScanRequired AS Is_Fullscan_Required , av.QuickScanOverDue AS Is_Quick_Scan_Overdue , av.FullScanOverDue AS Is_Full_Scan_Overdue FROM dbo.AntiVirus AS av INNER JOIN dbo.Computer AS c ON av.Computer_Idn = c.Computer_Idn
Device Information Expanded
Data Selection:
SELECT c.Computer_Idn , c.DeviceId AS Device_Id , c.HardwareId AS Hardware_Id , c.Type , c.NTDomainController AS Nt_Domain_Controller , c.DeviceName AS Device_Name , c.DeviceNameEx AS Device_Name_Ex , c.Description , c.LoginName AS Login_Name , c.FullName AS Full_Name , c.DisplayName AS Display_Name , c.SWNumFiles AS Sw_Num_Files , c.HWLastScanDate AS Hw_Last_Scan_Date , c.SWLastScanDate AS Sw_Last_Scan_Date , c.MINILastScanDate AS Mini_Last_Scan_Date , c.VALastScanDate AS Va_Last_Scan_Date , c.SpywareLastScanDate AS Spyware_Last_Scan_Date , c.SecurityLastScanDate AS Security_Last_Scan_Date , c.UpdateLastScanDate AS Update_Last_Scan_Date , c.UserDefinedLastScanDate AS User_Defined_Last_Scan_Date , c.BlockedLastScanDate AS Blocked_Last_Scan_Date , c.PatchSWLastScanDate AS Patch_Sw_Last_Scan_Date , c.PatchDriversLastScanDate AS Patch_Drivers_Last_Scan_Date , c.PatchAVLastScanDate AS Patch_Av_Last_Scan_Date , c.ComplianceLastScanDate AS Compliance_Last_Scan_Date , c.SWPackageLastScanDate AS Sw_Package_Last_Scan_Date , c.InventoryServer AS Inventory_Server , c.Notify_On_Change , c.PrimaryOwner AS Primary_Owner , c.LastUpdInvSvr AS Last_Upd_inv_Svr , c.ScanType AS Scan_Type , c.DomainName AS Domain_Name , c.Model , c.Manufacturer , c.Workgroup , c.ModelNum AS Model_Num , c.FlpyDrvCnt AS Flpy_Drv_Cnt , c.RAMCache AS Ram_Cache , c.OS2Comment AS OS2_Comment , c.NetwareAddr AS Netware_Addr , c.NumMultiMedFiles AS Numb_Multi_Med_Files , c.MultiMedSize AS Multi_Med_Size , c.MultiMedExt AS Multi_Med_Ext , c.ComputerExistsTime AS Computer_Exists_Time , c.LastDeployedOSImage AS Last_Deployed_Os_Image , c.Coprocessor , c.PMMU , c.ComputerLocation AS Computer_Location , c.LDAPLocation AS Ldap_Location , c.OwnerPhone AS Owner_Phone , c.OwnerEmail AS Owner_Email , c.CompanyName AS Company_Name , c.IpmiGuid AS Impi_Guid , c.AMTGuid AS Amt_Guid , c.ServerType AS Server_Type , c.HWMonitoringType AS Hw_Monitoring_Type , c.MainBoardOEM_Name AS Main_Board_Oem_Name , c.SystemOEM_Name AS System_Oem_Name , c.WorkflowStatusId AS Workflow_Status_Id , c.DSViewPort AS Ds_View_Port , c.RecordDate AS Record_Date , c.ComputerName AS Computer_Name , c.QualifiedUser AS Qualified_User , c.TenantName AS Tenant_Name , c.TenantUID AS Tenant_Uid , c.LastLogonDate AS Last_Logon_Date , c.CloudTenantUid AS Cloud_Tenant_Uid , c.LastPolicySync AS Last_Policy_Sync , c.OrgUnitPath AS Org_Unit_Path , c.LastEnrollmentDateExt AS Last_Enrollment_Date_Ext , c.LastSyncDateExt AS Last_Sync_Date_Ext , c.Agentless , c.AGLS_status , c.AGLS_LastAttempted AS Agls_Last_Attempted , c.CSEPCredentials_Idn AS Cesp_Credentials_Idn , c.StaticLocation AS Static_Location , c.VirtMachID AS Virt_Match_Id , c.VirtMachName AS Virt_Match_Name , c.MDMID AS Mdm_Id , c.DaysAntivirus AS Days_Antivirus , c.DaysBlocked AS Days_Blocked , c.DaysCompliance AS Days_Compliance , c.DaysCustomDef AS Days_Customer_Def , c.DaysDriverUpdate AS Days_Driver_Update , c.DaysHardware AS Days_Hardware , c.DaysSecurity AS Days_Security , c.DaysSoftware AS Days_Software , c.DaysSofUpdates AS Days_Of_Updates , c.DaysSpyware AS Days_Spyware , c.DaysUpdate AS Days_Update , c.DaysInvServer AS Days_Inv_Server , c.DaysVulnerabil AS Days_Vulnerabil , c.Barcode , c.BarcodeConfig AS Barcode_Config , c.SerialNumber AS Serial_Number , c.Status , c.Laptop , c.LastWMIScanDate AS Last_Wmi_Scan_Date , c.DeviceType AS Device_Type , os.Operating_System_Idn , os.OSType AS OS_Type , os.Version , os.LastStartUpTime AS Last_Startup_Time , os.PreBootOS AS Pre_Boot_OS , os.LastLogonDate AS Last_Logon_Date , os.LastLogoffDate AS Last_Logoff_Date , os.LastLockDate AS Last_Lock_Date , os.LastUnlockDate AS Last_Unlock_Date , os.DaysStartup AS Days_Startup , os.Architecture , b.BiosDate AS Bios_Date , b.SystemModel AS System_Model , b.IDBytes AS Id_Bytes , b.Copyright , b.SystemName AS System_Name , b.Manufacturer , b.AssetTag AS Asset_Tag , b.ServiceTag AS Service_Tag , b.IdeSerial AS Ide_Serial , b.MonitorSerial AS Monitor_Serial , b.SystemSerial AS System_Serial , b.BoardRevLevel AS Board_Rev_Level , b.FirmwareRevision AS Firmware_Revision , b.MonitorModel AS Monitor_Model , b.MonManufacturer AS Mon_Manufacturer , b.RomSize AS Rom_Size , b.RomVersion AS Rom_Version , b.UnivRom AS Univ_Rom , b.InstalledDate AS Installed_Date , b.RomFamily AS Rom_Family , b.SysModNum AS Sys_Mod_Num , b.Model , b.SysManufacturer AS Sys_Manufacturer , b.MachID AS Mach_Id , b.HWAttrs AS Hw_Attrs , b.BootROMVer AS Boot_Rom_Ver , b.ROMFileVer AS Rom_File_Ver , b.SerialNum AS Serial_Num , b.SWBundle AS Sw_Bundle , b.OrdNum AS Ord_Num , b.SMBIOSVer AS Sm_Bios_Ver , b.MonitorMfgYear AS Monitor_Mfg_Year , b.MonitorMfgWeek AS Monitor_Mfg_Week , b.MonitorSize AS Monitor_Size , b.MonitorVendorID AS Monitor_Vendor_Id , b.UEFIEnabled AS Uefi_Enabled , b.SecureBootEnabled AS Secure_Boot_Enabled , m.BytesTotal AS Bytes_Total , m.BytesAvail AS Bytes_Avail , m.SysHeapSize AS Sys_Heap_Size , m.PageTotal AS Page_Total , m.PageAvail AS Page_Avail , m.PageMaxSize AS Page_Max_Size , m.PageAvail2 AS Page_Avail2 , m.VirtTotal AS Virt_Total , m.VirtAvail AS Virt_Avail , m.VirtStatus AS Virt_Status , m.VirtVol AS Virt_Vol , m.ConvTotal AS Conv_Total , m.ConvAvail AS Conv_Avail , m.ExtTotal AS Ext_Total , m.ExtAvail AS Ext_Avail , m.XMSTotal AS Xms_Total , m.XMSAvail AS Xms_Avail , m.EMSTotal AS Ems_Total , m.EMSAvail AS Ems_Avail , m.NumSlots AS Num_Slots , m.L2Total AS L2_Total , m.StorageTotal AS Storage_Total , m.StorageAvail AS Storage_Avail , m.RAMTotal AS Ram_Total , m.RAMAvail AS Ram_Avail , m.MemDynamic AS Mem_Dynamic , m.NumCards AS Num_Cards , m.MaxMem AS Max_Mem , p.Type , p.MhzSpeed AS Mhz_Speed , p.ProcCount AS Proc_Count , p.PkgCount AS Pkg_Count , p.PkgCores AS Pkg_Cores , p.Stepping , p.ID , p.Vendor , p.SLSignature AS Sl_Signature , p.Model , p.ProcIndex AS Proc_Index , p.ProcType AS Proc_Type , p.ProcFamily AS Proc_Family , p.ProcVersion AS Proc_Version , p.MaxSpeed AS Max_Speed , p.CurrSpeed AS Curr_Speed , p.ProcUpgrade AS Proc_Upgrade , p.FRUGrpIndex AS Fru_Grp_Index , p.OPGrpIndex AS Op_Grp_Index , p.ProcSerialNum AS Proc_Serial_Num , p.OverdriveUpgrade AS Overdrive_Upgrade , p.VirtModeExt AS Virt_Mode_Ext , p.PageSizeExt AS Page_Size_Ext , p.TimeStampCnt AS Timestamp_Cnt , p.ModelRegisters AS Model_Registers , p.PhysAddrExt AS Phys_Addr_Ext , p.MachChkExcept AS Match_Chk_Except , p.CMPXCHG8BInstSppt AS Cmpxchg_8B_Inst_Sppt , p.APIC , p.MemoryTypeRangeReg AS Memory_Type_Range_Reg , p.PageGlobalEnable AS Page_Global_Enable , p.MachineCheckArch AS Machine_Check_Arch , p.CondMoveInstr AS Cond_Move_Instr , p.MMX , p.HyperThreading , p.GlobalPageEnable AS Global_Page_Enable , p.LeaseExp AS Least_Exp , p.ProcCnt AS Proc_Cnt , p.Speed , p.FeatureID AS Feature_Id , p.FeatureStepping AS Feature_Stepping , p.DHCPServ AS Dhcp_Serv , p.Architecture , p.ProcLevel AS Proc_Level , p.Revision , p.AllocGran AS Alloc_Gran , p.ProcessorPhysicalCount AS Processor_Physical_Count , p.ExternalClockSpeed AS External_Clock_Speed , p.CoresPerPkg AS Cores_Per_Pkg , p.EM64T , p.ExecDisable AS Exec_Disable , p.CacheSize AS Cache_Size , p.TotalCores AS Total_Cores , o.Operating_System_Idn , o.CurrentBuild AS Current_Build , o.CurrentType AS Current_Type , o.CurrentVersion AS Current_Version , o.SystemRoot AS System_Root , o.RegOrg AS Reg_Org , o.RegisteredOwner AS Registered_Owner , o.InstallDate AS Install_Date , o.ServicePack AS Service_Pack , o.Server , o.Language , o.LastBootUpTime AS Last_Bootup_Time , o.SerialNumber AS Serial_Number , o.MUILang AS Mui_Lang , o.WIMRegistered AS Wmi_Registered , o.ReleaseID AS Release_Id , o.BuildLab AS Build_Lab , o.UBR , o.UpdChannel AS Upd_Channel , o.DispVersion AS Disp_Version FROM dbo.Computer AS c INNER JOIN dbo.Operating_System AS os ON c.Computer_Idn = os.Computer_Idn INNER JOIN dbo.BIOS AS b ON c.Computer_Idn = b.Computer_Idn INNER JOIN dbo.Memory AS m ON c.Computer_Idn = m.Computer_Idn INNER JOIN dbo.Processor AS p ON c.Computer_Idn = p.Computer_Idn INNER JOIN dbo.OSNT AS o ON os.Computer_Idn = o.Computer_Idn AND os.Operating_System_Idn = o.Operating_System_Idn
Malware Status Expanded
Data Selection:
SELECT c.DeviceName AS Device_Name , aa.AutomateAction_Idn AS Automate_Action_Idn , aa.ActionDate AS Action_Date , aa.UserName AS User_Name , aa.ActionCode AS Action_Code , aa.ActionTaken AS Action_Taken , aa.Description , aa.MalwareType AS Malware_Type , aa.LogInfo AS Log_Info FROM dbo.Computer AS c INNER JOIN dbo.AutomateAction AS aa ON c.Computer_Idn = aa.Computer_Idn
Windows Device Patch Information Expanded
Data Selection:
SELECT c.DeviceName AS Device_Name , mcp.ID , mcp.Computer_IDN , mcp.Vul_ID , mcp.Detected , mcp.Lang , mcp.LastScanDate AS Last_Scan_Date , mcp.Patch , mcp.Reason , mcp.Expected , mcp.Found , mcp.DateDetected AS Date_Detected , mcp.PatchInstallSucceeded AS Patch_Install_Succeeded , mcp.PatchDetected AS Patch_Detected , mcp.PatchDetectedDate AS Patch_Detected_Date , mcp.PatchInstallDate AS Patch_Install_Date , mcp.PatchInstallStatus AS Patch_Install_Status , mcp.Updated FROM dbo.Computer AS c INNER JOIN dbo.MP_ComputerPatch AS mcp ON c.Computer_Idn = mcp.Computer_IDN
Collection Inventory Expanded
Data Selection:
SELECT cg.SLM_ComputerGroup_Idn AS Slm_Computer_Group_Idn , cg.GroupName AS Group_Name , cg.GroupType AS Group_Type , cg.DeviceGroupId AS Device_Group_Id , cg.QueryId AS Query_Id , cg.Allocation , q.Query_Idn , q.ConsoleUser_Idn AS Query_Console_User_Idn , q.QueryType AS Query_Type , q.Name , q.Filter , q.QuerySQL AS Query_Sql , q.LastSavedBy AS Last_Saved_By , q.LastSavedDate AS Last_Saved_Date , q.Guid , q.SourceCore AS Query_Source_Core , q.Notes , q.Revision , q.SyncEnabled AS Query_Sync_Enabled , q.LastResolvedDate AS Last_Resolved_Date , cug.CustomGroup_Idn AS Custom_Group_Idn , cug.ParentCustomGroup_Idn AS Parent_Custom_Group_Idn , cug.Name , cug.Type , cug.ConsoleUser_Idn AS Custom_Group_Console_User_Idn , cug.ReadOnly AS Read_Only , cug.LastSavedBy AS Last_Saved_By , cug.LastSavedDate AS Last_Saved_Date , cug.Guid , cug.SourceCore AS Custom_Group_Source_Core , cug.Notes , cug.Revision , cug.SyncEnabled AS Custom_Group_Sync_Enabled FROM dbo.SLM_ComputerGroup AS cg LEFT JOIN dbo.Query AS q ON q.Query_Idn = cg.QueryId LEFT JOIN dbo.CustomGroup AS cug ON cug.CustomGroup_Idn = cg.DeviceGroupId
App and OS Deployment Status Expanded
Data Selection:
SELECT c.DeviceName AS Device_Name , ou.Computer_Idn , ou.OSUpdates_Idn AS Os_Updates_Idn , ou.UpdateName AS Update_Name , ou.Version , ou.Publisher , ou.InstallDate AS Install_Date FROM dbo.Computer AS c INNER JOIN dbo.OSUpdates AS ou ON c.Computer_Idn = ou.Computer_Idn
NOTE: All eighteen templates ship with Enabled set to No and a Daily schedule. Review each one, enable only the jobs you need, and stagger the schedules if you enable several of the Expanded jobs against a large core database.
Outbound Job Templates (0)
The Ivanti connector ships no outbound templates and exposes no outbound job fields. It reads from the Ivanti core database and never writes to it.
