Views:

Review the properties you can use to create the search rules and groups for your smart folders.

Properties are an attribute that some or all computers you want to find have. Smart folders show computers that have the selected property, and its value matches.
Type your search exactly as that property appears in Server & Workload Protection, as opposed to, for example, AWS, Azure, or GCP. Otherwise, your smart folder query cannot match. To find the exact matching text (unless otherwise noted), go to Computers and look in the navigation pane on the left.

General

Property
Description
Data type
Examples
Hostname
The computer's host name, as seen on Computers > Details in Hostname.
string
ca-staging-web1
Computer Display Name
The computer's display name in the Server & Workload Protection console (if any), as seen on Computers > Details in Display Name.
string
nginxTest
Folder Name
The computer's assigned group.
string
US-East
Operating System
The computer's operating system, as seen on Computers > Details in Platform.
string
Microsoft Windows 7 (64 bit) Service Pack 1 Build 7601
IP Address
The computer's IP address.
You can find the IP address in the Server & Workload Protection console.
  • To find the IP of an AWS instance, GCP VM, or Azure VM that was added to Server & Workload Protection through Add > Add AWS|Azure|GCP Account, go the computer's details page, and under the General tab, scroll to the Virtual machine Summary section. The AWS IP addresses are listed in these fields:
    • Private IP Address
    • Public IP (PIP) Address
    Note
    Note
    If you added the AWS, GCP, or Azure computer through Add > Add Computers, its IP address is located in the same place as a physical computer's.
  • To find the IP of a physical computer, go to the computer's details page and on the left, click Interfaces.
    Note
    Note
    If "DHCP" is displayed instead of a static IP address, it won't match the smart folder query.
  • To find the IP of a vCenter or vCloud VM, go to the vCenter computer's details page, and under the General tab, scroll to the Virtual machine Summary section. The vCenter or vCloud IP address is listed in the IP Address field.
IPv4 or IPv6 address, or an IPv4 range
172.20.1.5-172.20.1.55
2001:db8:face::5
Policy
The computer's assigned Server & Workload Protection policy, as seen on Computers > Details.
string
(option in drop-down list)
Base Policy
Activated
Whether or not the computer has been activated with Workload Security, as seen on Computers > Details.
Boolean
Yes
Docker Host
Whether or not Docker is installed on the computer, as seen on Computers > Details.
Boolean
No
Computer Type
The type of computer. Options are: Physical Computer, Amazon EC2 Instance, Amazon WorkSpace, vCenter VM, Azure Instance, Azure ARM Instance, GCP VM Instance.
string (option in drop-down list)
Examples: Physical Computer, Amazon EC2 Instance
Last Successful Recommendation Scan
Whether or not the computer has had a successful recommendation scan within a specified time period. The last recommendation scan date and results can be seen on Computers > Details > General > Intrusion Prevention or Integrity Monitoring or Log Inspection > Recommendations.
Date operator drop-down list, String, Date unit drop-down list
OLDER THAN, 7, DAYS
Last Agent Communication
Whether or not the agent has communicated with Server & Workload Protection within a specified time period. The Last Communication date can be seen on Computers > Details > General > Last Communication.
Date operator drop-down list, String, Date unit drop-down list
OLDER THAN, 3, DAYS
Agent Offline
Whether or not the agent is offline. This is displayed as Managed (Offline) or Offline on Computers > Details > General > Last Communication.
Boolean
Yes
Task(s)
State of the computer's tasks, as displayed in the Task(s) column on the Computers page. For a list of all possible tasks, see Computer and agent statuses.
string
Activating
Host Created Date
Date when the computer was added to Server & Workload Protection.
string (date)
2019-03-15
Version
Agent version.
string
12.0.0.1
Trend Vision One Endpoint Security agent readiness status
Note
Note
This is a "pre-release" feature and is not considered an official release. Review the Pre-release Disclaimer before using the feature.
The Trend Vision One Endpoint Security agent readiness status of a computer.
Options: Ready to Install, Install Pending, Installing, Install Failed, Trend Vision One Endpoint Security agent Installed, Platform not Supported, Deep Security Agent Version not Supported
 string Ready to Install

AWS

Property
Description
Data type
Examples
Tag
The computer's AWS tag key:value pair, as seen on Computers > Details > Overview > General under Virtual machine Summary, in Cloud Instance Metadata.
Type the tag name, then its value. Case-sensitive.
string
Tag Key: env
Tag Value: staging
Security Group Name
The computer's associated AWS security group name, as seen on Computers > Details > Overview > General under Virtual machine Summary, in Security Group(s).
string
SecGrp1
Security Group ID
The computer's AWS security group ID, as seen on Computers > Details > Overview > General under Virtual machine Summary, in Security Group(s).
string
sg-12345678
AMI ID
The computer's Amazon Machine AMI ID, as seen on Computers > Details > Overview > General under Virtual machine Summary, in AMI ID.
string
ami-23c44a56
Account ID
The computer's associated 12-digit AWS Account ID, as seen on Computers when you right-click Amazon Account and select Properties.
Results include computers in sub-folders.
string
123456789012
Account Name
The computer's associated AWS Account Alias, as seen on Computers when you right-click the AWS Cloud Connector and select Properties.
Results include computers in sub-folders.
string
MyAccount-123
Region ID
The computer's AWS region suffix.
Results include computers in sub-folders.
string
us-east-1
Region Name
The computer's associated AWS region name.
Results include computers in sub-folders.
string
US East (Ohio)
VPC ID
The computer's Virtual Private Cloud (VPC) ID.
If an alias exists, the folder name is the alias, followed by the VPC ID in parentheses. Otherwise the folder's name is the VPC ID.
Results include computers in sub-folders.
string
vpc-3005e48a
Subnet ID
The computer's associated Virtual Private Cloud (VPC) subnet ID.
If an alias exists, the folder name is the alias, followed by the VPC subnet ID in parentheses. Otherwise the folder's name is the VPC subnet ID.
Results include computers in sub-folders.
string
subnet-b1c2e468
Directory ID
The ID of the AWS directory where the user entry associated with an Amazon WorkSpace resides. The directory ID is seen on the Computers > Details > Virtual machine Summary, in the WorkSpace Directory field. That field takes the format <directory_alias>(<directory_ID>), for example, myworkspacedir(d-9367232d89).
string
d-9367232d89

Azure

Property
Description
Data type
Examples
Subscription Name
The Subscription Name is no longer collected. It remains visible in the drop-down list of properties in case the information was obtained through a previous version of the Server & Workload Protection console.
The computer's associated Azure subscription account ID, as seen on Computers when you right-click Azure and select Properties.
Results include computers in sub-folders.
string
MyAzureAccount
Resource Group
The computer's associated resource group
string
MyResourceGroup
Location
The computer's location name
string
East US
Tag
The computer's Azure tag key:value pair, as seen on Computers > Details > Overview > General under under Virtual machine Summary, in Cloud Instance Metadata.
Type the tag name, then its value. Case-sensitive.
string
Tag Key: env
Tag Value: staging

Google Cloud (GCP)

Property
Description
Data type
Examples
Label
The computer's GCP label key:value pair, as seen on Computers > Details > Overview > General under Virtual machine Summary, in Cloud Instance Metadata.
Type the label key, and then its value. Case-sensitive.
string
Label Key: env
Label Value: staging
Network Tag
The computer's network tag, as seen on Computers > Details > Overview > General under Virtual machine Summary, in Cloud Instance Metadata.
string
production

vCenter

Property
Description
Data type
Examples
Name
The computer's associated vCenter.
Results include computers in sub-folders.
string
vCenter - lab13-vc.example.com
Datacenter
The computer's associated vCenter data center.
Results include computers in sub-folders.
string
lab13-datacenter
Folder
The computer's vCenter folder.
Results include computers in sub-folders.
string
db_dev
Parent ESX Hostname
The hostname of the ESXi hypervisor where the computer's guest VM is running, as seen on Computers.
string
lab13-esx2.example.com
Custom Attribute
The computer's assigned vCenter custom attribute, as seen on Computers > Details in Virtual machine Summary.
string
(comma-separated attribute name and value)
env, production

vCloud

Property
Description
Data type
Examples
Name
The computer's associated vCloud.
Results include computers in sub-folders.
string
vCloud-lab23
Datacenter
The computer's associated vCloud data center.
Results include computers in sub-folders.
string
lab13-datacenter
vApp
The computer's associated vCloud data center folder.
Results include computers in sub-folders.
string
db_dev

Active Directory

Property
Description
Data type
Examples
Name
 The hostname of the Microsoft Active Directory or LDAP directory.
Results include computers in sub-folders.
string
ad01.example.com
Folder
The computer's Microsoft Active Directory or LDAP folder name.
Results include computers in sub-folders.
string
Computers