node_cpe_changes
When a Common Platform Enumeration (CPE) updates, it creates an entry in this query source to track software updates or to detect software.
| id | Primary key of this query source |
| node_id | The id of the node this Common Platform Enumeration (CPE) refers to |
| cpe | The old full CPE |
| cpe_part | The old part piece of the CPE |
| cpe_vendor | The old vendor piece of the CPE |
| cpe_product | The old product piece of the CPE |
| cpe_version | The old version piece of the CPE |
| cpe_update | The old update piece of the CPE |
| new_cpe | The CPE that has replaced the old one |
| new_cpe_vendor | The CPE vendor that has replaced the old one |
| new_cpe_product | The CPE product that has replaced the old one |
| new_cpe_version | The CPE version that has replaced the old one |
| new_cpe_update | The CPE update that has replaced the old one |
| node_cpe_id | The identifier (ID) of the Node CPE id (node_cpe query source) entity to which this change event relates to |
| time | Timestamp in epoch milliseconds when this entity was created or updated |
| synchronized | True if this entity has been synchronized with the upper Central Management Console (CMC) or Vantage |
| appliance_id | The id of the sensor where this entity has been observed |
| appliance_ip | The internet protocol (IP) address of the sensor where this entity has been observed |
| appliance_host | The hostname of the sensor where this entity has been observed |
| human_cpe_vendor | The old human-readable version of the CPE vendor |
| human_cpe_product | The old human-readable version of the CPE product |
| new_human_cpe_vendor | The new human-readable version of the CPE vendor |
| new_human_cpe_product | The new human-readable version of the CPE product |
| human_cpe_version | The old human-readable version of the CPE version |
| human_cpe_update | The old human-readable version of the CPE update |
| new_human_cpe_version | The new human-readable version of the CPE version |
| new_human_cpe_update | The new human-readable version of the CPE update |
| likelihood | A value between 0.1 and 1.0 where 1.0 represents the maximum likelihood of the CPE to be real. This is the old value. |
| new_likelihood | A value between 0.1 and 1.0 where 1.0 represents the maximum likelihood of the CPE to be real. This is the new value. |
| replicated | This is true if the record has been replicated on the replica machine |
| cpe_edition | The old edition piece of the CPE |
| new_cpe_edition | The new edition piece of the CPE |
| human_cpe_edition | The old human-readable version of the CPE edition |
| new_human_cpe_edition | The new human-readable version of the CPE edition |