Axonius Asset Inventory Tables

Tables

AxoniusDevices

Stores Axonius aggregated device asset records, combining data from all connected adapters into a single de-duplicated inventory entry per device, including hostname, OS, IP addresses, MACs, last-seen timestamp, and adapter coverage.

Name	Type	Description
InternalAxonID	string	Axonius aggregated device id. PK with `ConfigID`.
ConfigID	integer	Axonius integration configuration this row belongs to. PK with `InternalAxonID`.
Name	string	Preferred device display name from aggregated adapters.
Hostname	string	Preferred hostname.
OsType	string	OS family (`Windows`, `Linux`, `macOS`, and similar).
IpsSerialized	string	JSON array of unique IP addresses.
MacsSerialized	string	JSON array of unique MAC addresses.
LastSeen	datetime	Latest last-seen timestamp across adapters.
AdaptersSerialized	string	JSON array of adapter plugin names that reported this device.
AdapterListLength	integer	Adapter count. Length `1` is a coverage gap.
LabelsSerialized	string	JSON array of Axonius labels/tags.
BatchDate	datetime	ETL batch timestamp for this wipe-and-rewrite.

AxoniusAssetUsers

Contains Axonius aggregated identity asset records representing users correlated across all connected adapters, including username, email, domain, administrator status, and last-seen timestamp.

Name	Type	Description
InternalAxonID	string	Axonius aggregated identity id. PK with `ConfigID`. Not a console user.
ConfigID	integer	Axonius integration configuration this row belongs to. PK with `InternalAxonID`.
Username	string	Preferred username.
Mail	string	Preferred email.
Domain	string	Directory or identity domain.
IsAdmin	boolean	Whether adapters report this identity as an administrator.
LastSeen	datetime	Latest last-seen timestamp across adapters.
AdaptersSerialized	string	JSON array of adapter plugin names that reported this identity.
AdapterListLength	integer	Adapter count that contributed to this asset.
LabelsSerialized	string	JSON array of Axonius labels/tags.
BatchDate	datetime	ETL batch timestamp for this wipe-and-rewrite.

AxoniusSoftware

Stores Axonius aggregated software asset records representing unique software products observed across devices, including product name, version, vendor, and the adapters that reported them.

Name	Type	Description
InternalAxonID	string	Axonius aggregated software id. PK with `ConfigID`.
ConfigID	integer	Axonius integration configuration this row belongs to. PK with `InternalAxonID`.
Name	string	Software product name.
Version	string	Software version.
Vendor	string	Software vendor.
AdaptersSerialized	string	JSON array of adapter plugin names that reported this software.
AdapterListLength	integer	Adapter count that contributed to this asset.
BatchDate	datetime	ETL batch timestamp for this wipe-and-rewrite.

AxoniusVulnerabilities

Contains Axonius aggregated vulnerability catalog records representing unique vulnerability findings across the environment, including CVE identifier, name, severity, and CVSS score.

Name	Type	Description
InternalAxonID	string	Axonius aggregated vulnerability catalog id. PK with `ConfigID`.
ConfigID	integer	Axonius integration configuration this row belongs to. PK with `InternalAxonID`.
CveID	string	CVE id when the finding is a CVE.
Name	string	Vulnerability name or title.
Severity	string	Reported severity (`critical`, `high`, and similar).
Cvss	decimal	CVSS score (`v2` or `v3`, whichever adapters report).
AdaptersSerialized	string	JSON array of adapter plugin names that reported this finding.
AdapterListLength	integer	Adapter count that contributed to this asset.
BatchDate	datetime	ETL batch timestamp for this wipe-and-rewrite.

AxoniusVulnerabilityInstances

Records individual vulnerability-to-device instance associations observed by Axonius, linking each vulnerability catalog entry to the specific device it was found on along with the instance status and last-seen timestamp.

Name	Type	Description
InternalAxonID	string	Axonius id of this finding-on-device instance. PK with VulnerabilityID and `ConfigID`.
VulnerabilityID	string	CVE or parent catalog id used to correlate to `AxoniusVulnerabilities`.
ConfigID	integer	Axonius integration configuration this row belongs to. PK with `InternalAxonID` and `VulnerabilityID`.
DeviceInternalAxonID	string	Device `InternalAxonID` this instance was observed on. Indexed with `ConfigID`.
Status	string	Instance status (`open`, `mitigated`, and similar).
LastSeen	datetime	Last-seen timestamp for this instance.
BatchDate	datetime	ETL batch timestamp for this wipe-and-rewrite.

AxoniusAdapters

Stores Axonius adapter connection health records, capturing the plugin name, connection counts by status (success, error, warning, inactive), and overall adapter health for each configured integration source.

Name	Type	Description
InternalAxonID	string	Stable adapter key: `internal_axon_id`, else `unique_plugin_name`, else `id`. PK with `ConfigID`.
ConfigID	integer	Axonius integration configuration this row belongs to. PK with `InternalAxonID`.
PluginName	string	Adapter plugin name (for example `active_directory_adapter`).
UniquePluginName	string	Unique plugin instance name on the Axonius node.
Status	string	Adapter health (`success`, `error`, `warning`, `inactive`).
SuccessCount	integer	Successful connection count.
TotalCount	integer	Total connection count.
ErrorCount	integer	Erroring connection count.
InactiveCount	integer	Inactive connection count.
WarningCount	integer	Warning connection count.
BatchDate	datetime	ETL batch timestamp for this wipe-and-rewrite.