node_cpe_changes
When a Common Platform Enumeration (CPE) updates, it creates an entry in this query source to track software updates or to detect software.
id | Primary key of this query source |
node_id | The id of the node this Common Platform Enumeration (CPE) refers to |
cpe | The old full CPE |
cpe_part | The old part piece of the CPE |
cpe_vendor | The old vendor piece of the CPE |
cpe_product | The old product piece of the CPE |
cpe_version | The old version piece of the CPE |
cpe_update | The old update piece of the CPE |
new_cpe | The CPE that has replaced the old one |
new_cpe_vendor | The CPE vendor that has replaced the old one |
new_cpe_product | The CPE product that has replaced the old one |
new_cpe_version | The CPE version that has replaced the old one |
new_cpe_update | The CPE update that has replaced the old one |
node_cpe_id | The identifier (ID) of the Node CPE id (node_cpe query source) entity to which this change event relates to |
time | Timestamp in epoch milliseconds when this entity was created or updated |
synchronized | True if this entity has been synchronized with the upper Central Management Console (CMC) or Vantage |
appliance_id | The id of the sensor where this entity has been observed |
appliance_ip | The internet protocol (IP) address of the sensor where this entity has been observed |
appliance_host | The hostname of the sensor where this entity has been observed |
human_cpe_vendor | The old human-readable version of the CPE vendor |
human_cpe_product | The old human-readable version of the CPE product |
new_human_cpe_vendor | The new human-readable version of the CPE vendor |
new_human_cpe_product | The new human-readable version of the CPE product |
human_cpe_version | The old human-readable version of the CPE version |
human_cpe_update | The old human-readable version of the CPE update |
new_human_cpe_version | The new human-readable version of the CPE version |
new_human_cpe_update | The new human-readable version of the CPE update |
likelihood | A value between 0.1 and 1.0 where 1.0 represents the maximum likelihood of the CPE to be real. This is the old value. |
new_likelihood | A value between 0.1 and 1.0 where 1.0 represents the maximum likelihood of the CPE to be real. This is the new value. |
replicated | This is true if the record has been replicated on the replica machine |
cpe_edition | The old edition piece of the CPE |
new_cpe_edition | The new edition piece of the CPE |
human_cpe_edition | The old human-readable version of the CPE edition |
new_human_cpe_edition | The new human-readable version of the CPE edition |