--- title: CMDB classes targeted in the Service Graph Connector for SentinelOne description: When you complete setting up the connection, you can configure the integration to periodically pull data. The data is saved in tables that extend from the Configuration item \[cmdb\_ci\] table. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/servicenow-platform/service-graph-connectors/sgc-sentinelone-data-mapping.html release: australia product: Service Graph Connectors classification: service-graph-connectors topic_type: reference last_updated: "2026-03-12" reading_time_minutes: 5 breadcrumb: [SentinelOne, Service Graph Connectors, Integrating third-party data into CMDB, Configuration Management, Extend ServiceNow AI Platform capabilities] --- # CMDB classes targeted in the Service Graph Connector for SentinelOne When you complete setting up the connection, you can configure the integration to periodically pull data. The data is saved in tables that extend from the Configuration item \[cmdb\_ci\] table. ## AWS Datacenter \[cmdb\_ci\_aws\_datacenter\] The following attributes in the AWS Datacenter \[cmdb\_ci\_aws\_datacenter\] table are populated by collected data. |Attribute label|Attribute name| |---------------|--------------| |Object Id|object\_id| |Region|region| |Name|name| |Parent Class|Relationship Type|Child Class| |------------|-----------------|-----------| |AWS Datacenter \[cmdb\_ci\_aws\_datacenter\]|Hosted On: Hosts|Cloud Service Account \[cmdb\_ci\_cloud\_service\_account\]| ## Azure Datacenter \[cmdb\_ci\_azure\_datacenter\] The following attributes in the Azure Datacenter \[cmdb\_ci\_azure\_datacenter\] table are populated by collected data. |Attribute label|Attribute name| |---------------|--------------| |Object Id|region| |Name|name| |Region|region| |Parent Class|Relationship Type|Child Class| |------------|-----------------|-----------| |Azure Datacenter \[cmdb\_ci\_azure\_datacenter\]|Hosted On: Hosts|Cloud Service Account \[cmdb\_ci\_cloud\_service\_account\]| ## Availability Zone \[cmdb\_ci\_availability\_zone\] The following attributes in the Availability Zone \[cmdb\_ci\_availability\_zone\] table are populated by collected data. |Parent Class|Relationship Type|Child Class| |------------|-----------------|-----------| |Azure Datacenter \[cmdb\_ci\_azure\_datacenter\]|Contains:Contained by|Availability Zone \[cmdb\_ci\_availability\_zone\]| |Attribute label|Attribute name| |---------------|--------------| |Name|name| |Object Id|object\_id| |Region|region| ## GCP Datacenter \[cmdb\_ci\_google\_datacenter\] The following attributes in the GCP Datacenter \[cmdb\_ci\_google\_datacenter\] table are populated by collected data. |Attribute label|Attribute name| |---------------|--------------| |Name|name| |Object Id|object\_id| |Account Id|account\_id| |Datacenter Type|datacenter\_type| |Parent Class|Relationship Type|Child Class| |------------|-----------------|-----------| |GCP Datacenter \[cmdb\_ci\_google\_datacenter\]|Hosted On: Hosts|Cloud Service Account \[cmdb\_ci\_cloud\_service\_account\]| ## Cloud Service Account \[cmdb\_ci\_cloud\_service\_account\] The following attributes in the Cloud Service Account \[cmdb\_ci\_cloud\_service\_account\] table are populated by collected data. |Attribute label|Attribute name| |---------------|--------------| |Name|name| |Object Id|object\_Id| |Account Id|account\_Id| |Datacenter Type|datacenter\_type| |Parent Class|Relationship Type|Child Class| |------------|-----------------|-----------| |Network \[cmdb\_ci\_network\]|Hosted On: Hosts|Cloud Service Account \[cmdb\_ci\_cloud\_service\_account\]| ## Cloud Subnets \[cmdb\_ci\_cloud\_subnet\] The following attributes in the Cloud Subnets \[cmdb\_ci\_cloud\_subnet\] table are populated by collected data. |Attribute label|Attribute name| |---------------|--------------| |Object Id|object\_id| |Name|name| |Parent Class|Relationship Type|Child Class| |------------|-----------------|-----------| |Network \[cmdb\_ci\_network\]|Contains:Contained by|Cloud Subnets \[cmdb\_ci\_cloud\_subnet\]| ## Hardware Type \[cmdb\_ci\_compute\_template\] The following attributes in the Hardware Type \[cmdb\_ci\_compute\_template\] table are populated by collected data. |Attribute label|Attribute name| |---------------|--------------| |Name|name| |Object Id|object\_id| |Parent Class|Relationship Type|Child Class| |------------|-----------------|-----------| |Compute Template \[cmdb\_ci\_compute\_template\]|Hosted On: Hosts|Cloud Service Account \[cmdb\_ci\_cloud\_service\_account\]| |VM Instance \[cmdb\_ci\_vm\_instance\]|Provisioned From::Provisioned|Compute Template \[cmdb\_ci\_compute\_template\]| ## Cloud Network \[cmdb\_ci\_network\] The following attributes in the Cloud Network \[cmdb\_ci\_network\] table are populated by collected data. |Attribute label|Atribute name| |---------------|-------------| |Object Id|object\_id| |Name|name| |Parent Class|Relationship Type|Child Class| |------------|-----------------|-----------| |Network \[cmdb\_ci\_network\]|Hosted on::Hosts|Cloud Service Account \[cmdb\_ci\_cloud\_service\_account\]| ## Virtual Machine Instance \[cmdb\_ci\_vm\_instance\] The following attributes in the Virtual Machine Instance \[cmdb\_ci\_vm\_instance\] table are populated by collected data. |Attribute label|Attribute name| |---------------|--------------| |Object Id|object\_id| |Name|name| |VM Instance ID|vm\_inst\_id| |Parent Class|Relationship Type|Child Class| |------------|-----------------|-----------| |VM Instance \[cmdb\_ci\_vm\_instance\]|Hosted On: Hosts|AWS Datacenter \[cmdb\_ci\_aws\_datacenter\]| |VM Instance \[cmdb\_ci\_vm\_instance\]|Virtualized by::Virtualizes|Server \[cmdb\_ci\_server\]| |VM Instance \[cmdb\_ci\_vm\_instance\]|Hosted On: Hosts|AWS Datacenter \[cmdb\_ci\_aws\_datacenter\]| ## Key Value \[cmdb\_key\_value\] The following attributes in the Key Value \[cmdb\_key\_value\] table are populated by collected data. |Attribute label|Attribute name| |---------------|--------------| |Key|key| |Value|value| |Tag|tag| ## Image \[cmdb\_ci\_os\_template\] The following attributes in the Image \[cmdb\_ci\_os\_template\] table are populated by collected data. |Attribute label|Attribute name| |---------------|--------------| |Object Id|object\_id| |Name|name| |Parent Class|Relationship Type|Child Class| |------------|-----------------|-----------| |Image \[cmdb\_ci\_os\_template\]|Hosted on::Hosts|Cloud Service Account \[cmdb\_ci\_cloud\_service\_account\]| ## Server \[cmdb\_ci\_server\] The following attributes in the Server \[cmdb\_ci\_server\] table are populated by collected data. |Attribute label|Attribute name| |---------------|--------------| |Name|name| |Serial number|serial\_number| |CPU speed \(MHz\)|cpu\_speed| |CPU count|cpu\_count| |RAM \(MB\)|ram| |OS Address Width \(bits\)|os\_address\_width| |Operating System|os| |CPU core count|cpu\_core\_count| |Fully qualified domain name|fqdn| |CPU name|cpu\_name| |First Discovered|first\_discovered| ## Computer \[cmdb\_ci\_computer\] The following attributes in the Computer \[cmdb\_ci\_computer\] table are populated by collected data. |Attribute label|Attribute name| |---------------|--------------| |Name|name| |Serial number|serial\_number| |CPU speed \(MHz\)|cpu\_speed| |CPU count|cpu\_count| |RAM \(MB\)|ram| |OS Address Width \(bits\)|os\_address\_width| |Operating System|os| |CPU core count|cpu\_core\_count| |Fully qualified domain name|fqdn| |CPU name|cpu\_name| |First Discovered|first\_discovered| ## SentinelOne Asset Tags \[sn\_sec\_sgc\_sntlone\_asset\_tags\] The following attributes in the SentinelOne Asset Tags \[sn\_sec\_sgc\_sntlone\_asset\_tags\] table are populated by collected data. |Attribute label|Attribute name| |---------------|--------------| |ID|tags\_id| |Key|tags\_key| |Value|tags\_value| |Assigned At|tags\_assignedat| |Assigned By|tags\_assignedby| |Assigned By ID|assigned\_by\_id| ## IP Address \[cmdb\_ci\_ip\_address\] The following attributes in the IP Address \[cmdb\_ci\_ip\_address\] table are populated by collected data. |Attribute label|Attribute name| |---------------|--------------| |IP Address|ip\_address| |Name|name| |Nic|nic| |IP version|ip\_version| |Parent Class|Relationship Type|Child Class| |------------|-----------------|-----------| |Server \[cmdb\_ci\_server\]|Owns:Owned by|IP Address \[cmdb\_ci\_ip\_address\]| ## Network Adapter \[cmdb\_ci\_network\_adapter\] The following attributes in the Network Adapter \[cmdb\_ci\_network\_adapter\] table are populated by collected data. |Attribute label|Attribute name| |---------------|--------------| |Mac Address|mac\_address| |Name|name| |Ip Default Gateway|ip\_default\_gateway| |Discovery Source|discovery\_source| |Parent Class|Relationship Type|Child Class| |------------|-----------------|-----------| |Server \[cmdb\_ci\_server\]|Owns:Owned by|Network Adapter \[cmdb\_ci\_network\_adapter\]| ## SentinelOne Additional Attributes \[sn\_sec\_sgc\_sntlone\_additonal\_attributes\] The following attributes in the SentinelOne Additional Attributes \[sn\_sec\_sgc\_sntlone\_additonal\_attributes\] table are populated by collected data.
Attribute label Attribute name
NetworkInterfaces Name networkinterfaces\_name
NetworkInterfaces GatewayMacAddress networkinterfaces\_gatewaymacaddress
UUID uuid
Configuration item configuration\_item
Network Quarantine Enabled network\_quarantine\_enabled
Last Successful Scan Date last\_successful\_scan\_date
License\_Key license\_key
First Discovered first\_discovered
Location Enabled location\_enabled
Ad ComputerDistinguishedName ad\_computerdistinguishedname
Agent Version agent\_version
Scan Status scan\_status
Scan Started At scan\_started\_at
ID id
IP Address Subnet ip\_address\_subnet
Mitigation Mode Suspicious mitigation\_mode\_suspicious
Last Scan Finished At last\_scan\_finished\_at
Firewall Enabled firewall\_enabled
Console Migration Status console\_migration\_status
Group ID group\_id
Operational State Expiration operational\_state\_expiration
Last IP To Mgmt last\_ip\_to\_mgmt
Threat Reboot Required threat\_reboot\_required
Machine Type machine\_type
Is Pending Uninstall Ranger Status Is\_pending\_uninstall ranger\_status
Ad LastUserDistinguishedName ad\_lastuserdistinguishedname
Agent Up To Date agent\_up\_to\_date
Ranger Version ranger\_version
Last Boot Time last\_boot\_time
Disk Encryption Status disk\_encryption\_status
Mitigation Mode mitigation\_mode
Last Full Scan last\_full\_scan
Agent Uninstalled agent\_uninstalled
Extenal Id extenal\_id
Updated At updated\_at
Last Scan Aborted At last\_scan\_aborted\_at
Network Status network\_status
Show Alert Icon show\_alert\_icon
Subscribed On subscribed\_on
Account ID account\_id
Recently Active recently\_active
Active Threats active\_threats
Allow Remote Shell allow\_remote\_shell
Site Name site\_name
First Full Mode Time first\_full\_mode\_time
Infected infected
App Vulnerability Status app\_vulnerability\_status
Site ID site\_id
Agent Installer Type agent\_installer\_type
Account Name acount\_name
NetworkInterfaces Name networkinterfaces\_name
NetworkInterfaces GatewayMacAddress networkinterfaces\_gatewaymacaddress
NetworkInterfaces ID networkinterfaces\_id
user\_actions\_needed user\_actions\_needed
aws\_security\_group aws\_security\_group
proxyState\_console proxyState\_console
proxyState\_deepVisibility proxyState\_deepVisibility
Ad UserPrincipalName ad\_userPrincipalName
Ad ComputerMemberOf ad\_computerMemberOf
Ad ComputerDistinguishedName ad\_computerDistinguishedName
Ad LastUserMemberOf ad\_lastUserMemberOf
Ad LastUserDistinguishedName ad\_lastUserDistinguishedName
Ad Mail ad\_mail
Agent Decommissioned agent\_decommissioned
Agent Operational State agent\_operational\_state
Last Active Date last\_active\_date
Group Updated At group\_updated\_at
Missing Permissions missing\_permissions
## Service Graph Connector for SentinelOne Properties
Property Description
sn\_sec\_sgc\_sntlone.api\_page\_size Enter the number of records per page to retrieve.- Type: string - Default value: 1000 - Location: System Property \[sys\_properties\] table
**Note:** To open the System Properties \[sys\_properties\] table, enter sys\_properties.LIST in the navigation filter.