CMDB classes targeted in the Service Graph Connector for SentinelOne
reference brazil Updated Sep 10, 2026 5 min read sgc-sentinelone-data-mapping.md
When you complete setting up the connection, you can configure the integration to periodically pull data. The data is saved in tables that extend from the Configuration item [cmdb_ci] table.
AWS Datacenter [cmdb_ci_aws_datacenter]
The following attributes in the AWS Datacenter [cmdb_ci_aws_datacenter] table are populated by collected data.
| Attribute label | Attribute name |
|---|---|
| Object Id | object_id |
| Region | region |
| Name | name |
| Parent Class | Relationship Type | Child Class |
|---|---|---|
| AWS Datacenter [cmdb_ci_aws_datacenter] | Hosted On: Hosts | Cloud Service Account [cmdb_ci_cloud_service_account] |
Azure Datacenter [cmdb_ci_azure_datacenter]
The following attributes in the Azure Datacenter [cmdb_ci_azure_datacenter] table are populated by collected data.
| Attribute label | Attribute name |
|---|---|
| Object Id | region |
| Name | name |
| Region | region |
| Parent Class | Relationship Type | Child Class |
|---|---|---|
| Azure Datacenter [cmdb_ci_azure_datacenter] | Hosted On: Hosts | Cloud Service Account [cmdb_ci_cloud_service_account] |
Availability Zone [cmdb_ci_availability_zone]
The following attributes in the Availability Zone [cmdb_ci_availability_zone] table are populated by collected data.
| Parent Class | Relationship Type | Child Class |
|---|---|---|
| Azure Datacenter [cmdb_ci_azure_datacenter] | Contains:Contained by | Availability Zone [cmdb_ci_availability_zone] |
| Attribute label | Attribute name |
|---|---|
| Name | name |
| Object Id | object_id |
| Region | region |
GCP Datacenter [cmdb_ci_google_datacenter]
The following attributes in the GCP Datacenter [cmdb_ci_google_datacenter] table are populated by collected data.
| Attribute label | Attribute name |
|---|---|
| Name | name |
| Object Id | object_id |
| Account Id | account_id |
| Datacenter Type | datacenter_type |
| Parent Class | Relationship Type | Child Class |
|---|---|---|
| GCP Datacenter [cmdb_ci_google_datacenter] | Hosted On: Hosts | Cloud Service Account [cmdb_ci_cloud_service_account] |
Cloud Service Account [cmdb_ci_cloud_service_account]
The following attributes in the Cloud Service Account [cmdb_ci_cloud_service_account] table are populated by collected data.
| Attribute label | Attribute name |
|---|---|
| Name | name |
| Object Id | object_Id |
| Account Id | account_Id |
| Datacenter Type | datacenter_type |
| Parent Class | Relationship Type | Child Class |
|---|---|---|
| Network [cmdb_ci_network] | Hosted On: Hosts | Cloud Service Account [cmdb_ci_cloud_service_account] |
Cloud Subnets [cmdb_ci_cloud_subnet]
The following attributes in the Cloud Subnets [cmdb_ci_cloud_subnet] table are populated by collected data.
| Attribute label | Attribute name |
|---|---|
| Object Id | object_id |
| Name | name |
| Parent Class | Relationship Type | Child Class |
|---|---|---|
| Network [cmdb_ci_network] | Contains:Contained by | Cloud Subnets [cmdb_ci_cloud_subnet] |
Hardware Type [cmdb_ci_compute_template]
The following attributes in the Hardware Type [cmdb_ci_compute_template] table are populated by collected data.
| Attribute label | Attribute name |
|---|---|
| Name | name |
| Object Id | object_id |
| Parent Class | Relationship Type | Child Class |
|---|---|---|
| Compute Template [cmdb_ci_compute_template] | Hosted On: Hosts | Cloud Service Account [cmdb_ci_cloud_service_account] |
| VM Instance [cmdb_ci_vm_instance] | Provisioned From::Provisioned | Compute Template [cmdb_ci_compute_template] |
Cloud Network [cmdb_ci_network]
The following attributes in the Cloud Network [cmdb_ci_network] table are populated by collected data.
| Attribute label | Atribute name |
|---|---|
| Object Id | object_id |
| Name | name |
| Parent Class | Relationship Type | Child Class |
|---|---|---|
| Network [cmdb_ci_network] | Hosted on::Hosts | Cloud Service Account [cmdb_ci_cloud_service_account] |
Virtual Machine Instance [cmdb_ci_vm_instance]
The following attributes in the Virtual Machine Instance [cmdb_ci_vm_instance] table are populated by collected data.
| Attribute label | Attribute name |
|---|---|
| Object Id | object_id |
| Name | name |
| VM Instance ID | vm_inst_id |
| Parent Class | Relationship Type | Child Class |
|---|---|---|
| VM Instance [cmdb_ci_vm_instance] | Hosted On: Hosts | AWS Datacenter [cmdb_ci_aws_datacenter] |
| VM Instance [cmdb_ci_vm_instance] | Virtualized by::Virtualizes | Server [cmdb_ci_server] |
| VM Instance [cmdb_ci_vm_instance] | Hosted On: Hosts | AWS Datacenter [cmdb_ci_aws_datacenter] |
Key Value [cmdb_key_value]
The following attributes in the Key Value [cmdb_key_value] table are populated by collected data.
| Attribute label | Attribute name |
|---|---|
| Key | key |
| Value | value |
| Tag | tag |
Image [cmdb_ci_os_template]
The following attributes in the Image [cmdb_ci_os_template] table are populated by collected data.
| Attribute label | Attribute name |
|---|---|
| Object Id | object_id |
| Name | name |
| Parent Class | Relationship Type | Child Class |
|---|---|---|
| Image [cmdb_ci_os_template] | Hosted on::Hosts | Cloud Service Account [cmdb_ci_cloud_service_account] |
Server [cmdb_ci_server]
The following attributes in the Server [cmdb_ci_server] table are populated by collected data.
| Attribute label | Attribute name |
|---|---|
| Name | name |
| Serial number | serial_number |
| CPU speed (MHz) | cpu_speed |
| CPU count | cpu_count |
| RAM (MB) | ram |
| OS Address Width (bits) | os_address_width |
| Operating System | os |
| CPU core count | cpu_core_count |
| Fully qualified domain name | fqdn |
| CPU name | cpu_name |
| First Discovered | first_discovered |
Computer [cmdb_ci_computer]
The following attributes in the Computer [cmdb_ci_computer] table are populated by collected data.
| Attribute label | Attribute name |
|---|---|
| Name | name |
| Serial number | serial_number |
| CPU speed (MHz) | cpu_speed |
| CPU count | cpu_count |
| RAM (MB) | ram |
| OS Address Width (bits) | os_address_width |
| Operating System | os |
| CPU core count | cpu_core_count |
| Fully qualified domain name | fqdn |
| CPU name | cpu_name |
| First Discovered | first_discovered |
SentinelOne Asset Tags [sn_sec_sgc_sntlone_asset_tags]
The following attributes in the SentinelOne Asset Tags [sn_sec_sgc_sntlone_asset_tags] table are populated by collected data.
| Attribute label | Attribute name |
|---|---|
| ID | tags_id |
| Key | tags_key |
| Value | tags_value |
| Assigned At | tags_assignedat |
| Assigned By | tags_assignedby |
| Assigned By ID | assigned_by_id |
IP Address [cmdb_ci_ip_address]
The following attributes in the IP Address [cmdb_ci_ip_address] table are populated by collected data.
| Attribute label | Attribute name |
|---|---|
| IP Address | ip_address |
| Name | name |
| Nic | nic |
| IP version | ip_version |
| Parent Class | Relationship Type | Child Class |
|---|---|---|
| Server [cmdb_ci_server] | Owns:Owned by | IP Address [cmdb_ci_ip_address] |
Network Adapter [cmdb_ci_network_adapter]
The following attributes in the Network Adapter [cmdb_ci_network_adapter] table are populated by collected data.
| Attribute label | Attribute name |
|---|---|
| Mac Address | mac_address |
| Name | name |
| Ip Default Gateway | ip_default_gateway |
| Discovery Source | discovery_source |
| Parent Class | Relationship Type | Child Class |
|---|---|---|
| Server [cmdb_ci_server] | Owns:Owned by | Network Adapter [cmdb_ci_network_adapter] |
SentinelOne Additional Attributes [sn_sec_sgc_sntlone_additonal_attributes]
The following attributes in the SentinelOne Additional Attributes [sn_sec_sgc_sntlone_additonal_attributes] table are populated by collected data.
|
Attribute label |
Attribute name |
|---|---|
|
NetworkInterfaces Name |
networkinterfaces_name |
|
NetworkInterfaces GatewayMacAddress |
networkinterfaces_gatewaymacaddress |
|
UUID |
uuid |
|
Configuration item |
configuration_item |
|
Network Quarantine Enabled |
network_quarantine_enabled |
|
Last Successful Scan Date |
last_successful_scan_date |
|
License_Key |
license_key |
|
First Discovered |
first_discovered |
|
Location Enabled |
location_enabled |
|
Ad ComputerDistinguishedName |
ad_computerdistinguishedname |
|
Agent Version |
agent_version |
|
Scan Status |
scan_status |
|
Scan Started At |
scan_started_at |
|
ID |
id |
|
IP Address Subnet |
ip_address_subnet |
|
Mitigation Mode Suspicious |
mitigation_mode_suspicious |
|
Last Scan Finished At |
last_scan_finished_at |
|
Firewall Enabled |
firewall_enabled |
|
Console Migration Status |
console_migration_status |
|
Group ID |
group_id |
|
Operational State Expiration |
operational_state_expiration |
|
Last IP To Mgmt |
last_ip_to_mgmt |
|
Threat Reboot Required |
threat_reboot_required |
|
Machine Type |
machine_type |
|
Is Pending Uninstall Ranger Status |
Is_pending_uninstall ranger_status |
|
Ad LastUserDistinguishedName |
ad_lastuserdistinguishedname |
|
Agent Up To Date |
agent_up_to_date |
|
Ranger Version |
ranger_version |
|
Last Boot Time |
last_boot_time |
|
Disk Encryption Status |
disk_encryption_status |
|
Mitigation Mode |
mitigation_mode |
|
Last Full Scan |
last_full_scan |
|
Agent Uninstalled |
agent_uninstalled |
|
Extenal Id |
extenal_id |
|
Updated At |
updated_at |
|
Last Scan Aborted At |
last_scan_aborted_at |
|
Network Status |
network_status |
|
Show Alert Icon |
show_alert_icon |
|
Subscribed On |
subscribed_on |
|
Account ID |
account_id |
|
Recently Active |
recently_active |
|
Active Threats |
active_threats |
|
Allow Remote Shell |
allow_remote_shell |
|
Site Name |
site_name |
|
First Full Mode Time |
first_full_mode_time |
|
Infected |
infected |
|
App Vulnerability Status |
app_vulnerability_status |
|
Site ID |
site_id |
|
Agent Installer Type |
agent_installer_type |
|
Account Name |
acount_name |
|
NetworkInterfaces Name |
networkinterfaces_name |
|
NetworkInterfaces GatewayMacAddress |
networkinterfaces_gatewaymacaddress |
|
NetworkInterfaces ID |
networkinterfaces_id |
|
user_actions_needed |
user_actions_needed |
|
aws_security_group |
aws_security_group |
|
proxyState_console |
proxyState_console |
|
proxyState_deepVisibility |
proxyState_deepVisibility |
|
Ad UserPrincipalName |
ad_userPrincipalName |
|
Ad ComputerMemberOf |
ad_computerMemberOf |
|
Ad ComputerDistinguishedName |
ad_computerDistinguishedName |
|
Ad LastUserMemberOf |
ad_lastUserMemberOf |
|
Ad LastUserDistinguishedName |
ad_lastUserDistinguishedName |
|
Ad Mail |
ad_mail |
|
Agent Decommissioned |
agent_decommissioned |
|
Agent Operational State |
agent_operational_state |
|
Last Active Date |
last_active_date |
|
Group Updated At |
group_updated_at |
|
Missing Permissions |
missing_permissions |
|
Property |
Description |
|---|---|
|
sn_sec_sgc_sntlone.api_page_size |
Enter the number of records per page to retrieve.- Type: string
|
833 lines · 14.5 KB
--- title: CMDB classes targeted in the Service Graph Connector for SentinelOne description: When you complete setting up the connection, you can configure the integration to periodically pull data. The data is saved in tables that extend from the Configuration item \[cmdb\_ci\] table. locale: en-US canonical_url: https://www.servicenow.com/docs/r/servicenow-platform/service-graph-connectors/sgc-sentinelone-data-mapping.html release: brazil product: Service Graph Connectors classification: service-graph-connectors topic_type: reference last_updated: "2026-09-10" reading_time_minutes: 5 breadcrumb: [SentinelOne, Service Graph Connectors, Integrating third-party data into CMDB, Configuration Management, Extend ServiceNow AI Platform capabilities] --- # CMDB classes targeted in the Service Graph Connector for SentinelOne When you complete setting up the connection, you can configure the integration to periodically pull data. The data is saved in tables that extend from the Configuration item \[cmdb\_ci\] table. ## AWS Datacenter \[cmdb\_ci\_aws\_datacenter\] The following attributes in the AWS Datacenter \[cmdb\_ci\_aws\_datacenter\] table are populated by collected data. |Attribute label|Attribute name| |---------------|--------------| |Object Id|object\_id| |Region|region| |Name|name| |Parent Class|Relationship Type|Child Class| |------------|-----------------|-----------| |AWS Datacenter \[cmdb\_ci\_aws\_datacenter\]|Hosted On: Hosts|Cloud Service Account \[cmdb\_ci\_cloud\_service\_account\]| ## Azure Datacenter \[cmdb\_ci\_azure\_datacenter\] The following attributes in the Azure Datacenter \[cmdb\_ci\_azure\_datacenter\] table are populated by collected data. |Attribute label|Attribute name| |---------------|--------------| |Object Id|region| |Name|name| |Region|region| |Parent Class|Relationship Type|Child Class| |------------|-----------------|-----------| |Azure Datacenter \[cmdb\_ci\_azure\_datacenter\]|Hosted On: Hosts|Cloud Service Account \[cmdb\_ci\_cloud\_service\_account\]| ## Availability Zone \[cmdb\_ci\_availability\_zone\] The following attributes in the Availability Zone \[cmdb\_ci\_availability\_zone\] table are populated by collected data. |Parent Class|Relationship Type|Child Class| |------------|-----------------|-----------| |Azure Datacenter \[cmdb\_ci\_azure\_datacenter\]|Contains:Contained by|Availability Zone \[cmdb\_ci\_availability\_zone\]| |Attribute label|Attribute name| |---------------|--------------| |Name|name| |Object Id|object\_id| |Region|region| ## GCP Datacenter \[cmdb\_ci\_google\_datacenter\] The following attributes in the GCP Datacenter \[cmdb\_ci\_google\_datacenter\] table are populated by collected data. |Attribute label|Attribute name| |---------------|--------------| |Name|name| |Object Id|object\_id| |Account Id|account\_id| |Datacenter Type|datacenter\_type| |Parent Class|Relationship Type|Child Class| |------------|-----------------|-----------| |GCP Datacenter \[cmdb\_ci\_google\_datacenter\]|Hosted On: Hosts|Cloud Service Account \[cmdb\_ci\_cloud\_service\_account\]| ## Cloud Service Account \[cmdb\_ci\_cloud\_service\_account\] The following attributes in the Cloud Service Account \[cmdb\_ci\_cloud\_service\_account\] table are populated by collected data. |Attribute label|Attribute name| |---------------|--------------| |Name|name| |Object Id|object\_Id| |Account Id|account\_Id| |Datacenter Type|datacenter\_type| |Parent Class|Relationship Type|Child Class| |------------|-----------------|-----------| |Network \[cmdb\_ci\_network\]|Hosted On: Hosts|Cloud Service Account \[cmdb\_ci\_cloud\_service\_account\]| ## Cloud Subnets \[cmdb\_ci\_cloud\_subnet\] The following attributes in the Cloud Subnets \[cmdb\_ci\_cloud\_subnet\] table are populated by collected data. |Attribute label|Attribute name| |---------------|--------------| |Object Id|object\_id| |Name|name| |Parent Class|Relationship Type|Child Class| |------------|-----------------|-----------| |Network \[cmdb\_ci\_network\]|Contains:Contained by|Cloud Subnets \[cmdb\_ci\_cloud\_subnet\]| ## Hardware Type \[cmdb\_ci\_compute\_template\] The following attributes in the Hardware Type \[cmdb\_ci\_compute\_template\] table are populated by collected data. |Attribute label|Attribute name| |---------------|--------------| |Name|name| |Object Id|object\_id| |Parent Class|Relationship Type|Child Class| |------------|-----------------|-----------| |Compute Template \[cmdb\_ci\_compute\_template\]|Hosted On: Hosts|Cloud Service Account \[cmdb\_ci\_cloud\_service\_account\]| |VM Instance \[cmdb\_ci\_vm\_instance\]|Provisioned From::Provisioned|Compute Template \[cmdb\_ci\_compute\_template\]| ## Cloud Network \[cmdb\_ci\_network\] The following attributes in the Cloud Network \[cmdb\_ci\_network\] table are populated by collected data. |Attribute label|Atribute name| |---------------|-------------| |Object Id|object\_id| |Name|name| |Parent Class|Relationship Type|Child Class| |------------|-----------------|-----------| |Network \[cmdb\_ci\_network\]|Hosted on::Hosts|Cloud Service Account \[cmdb\_ci\_cloud\_service\_account\]| ## Virtual Machine Instance \[cmdb\_ci\_vm\_instance\] The following attributes in the Virtual Machine Instance \[cmdb\_ci\_vm\_instance\] table are populated by collected data. |Attribute label|Attribute name| |---------------|--------------| |Object Id|object\_id| |Name|name| |VM Instance ID|vm\_inst\_id| |Parent Class|Relationship Type|Child Class| |------------|-----------------|-----------| |VM Instance \[cmdb\_ci\_vm\_instance\]|Hosted On: Hosts|AWS Datacenter \[cmdb\_ci\_aws\_datacenter\]| |VM Instance \[cmdb\_ci\_vm\_instance\]|Virtualized by::Virtualizes|Server \[cmdb\_ci\_server\]| |VM Instance \[cmdb\_ci\_vm\_instance\]|Hosted On: Hosts|AWS Datacenter \[cmdb\_ci\_aws\_datacenter\]| ## Key Value \[cmdb\_key\_value\] The following attributes in the Key Value \[cmdb\_key\_value\] table are populated by collected data. |Attribute label|Attribute name| |---------------|--------------| |Key|key| |Value|value| |Tag|tag| ## Image \[cmdb\_ci\_os\_template\] The following attributes in the Image \[cmdb\_ci\_os\_template\] table are populated by collected data. |Attribute label|Attribute name| |---------------|--------------| |Object Id|object\_id| |Name|name| |Parent Class|Relationship Type|Child Class| |------------|-----------------|-----------| |Image \[cmdb\_ci\_os\_template\]|Hosted on::Hosts|Cloud Service Account \[cmdb\_ci\_cloud\_service\_account\]| ## Server \[cmdb\_ci\_server\] The following attributes in the Server \[cmdb\_ci\_server\] table are populated by collected data. |Attribute label|Attribute name| |---------------|--------------| |Name|name| |Serial number|serial\_number| |CPU speed \(MHz\)|cpu\_speed| |CPU count|cpu\_count| |RAM \(MB\)|ram| |OS Address Width \(bits\)|os\_address\_width| |Operating System|os| |CPU core count|cpu\_core\_count| |Fully qualified domain name|fqdn| |CPU name|cpu\_name| |First Discovered|first\_discovered| ## Computer \[cmdb\_ci\_computer\] The following attributes in the Computer \[cmdb\_ci\_computer\] table are populated by collected data. |Attribute label|Attribute name| |---------------|--------------| |Name|name| |Serial number|serial\_number| |CPU speed \(MHz\)|cpu\_speed| |CPU count|cpu\_count| |RAM \(MB\)|ram| |OS Address Width \(bits\)|os\_address\_width| |Operating System|os| |CPU core count|cpu\_core\_count| |Fully qualified domain name|fqdn| |CPU name|cpu\_name| |First Discovered|first\_discovered| ## SentinelOne Asset Tags \[sn\_sec\_sgc\_sntlone\_asset\_tags\] The following attributes in the SentinelOne Asset Tags \[sn\_sec\_sgc\_sntlone\_asset\_tags\] table are populated by collected data. |Attribute label|Attribute name| |---------------|--------------| |ID|tags\_id| |Key|tags\_key| |Value|tags\_value| |Assigned At|tags\_assignedat| |Assigned By|tags\_assignedby| |Assigned By ID|assigned\_by\_id| ## IP Address \[cmdb\_ci\_ip\_address\] The following attributes in the IP Address \[cmdb\_ci\_ip\_address\] table are populated by collected data. |Attribute label|Attribute name| |---------------|--------------| |IP Address|ip\_address| |Name|name| |Nic|nic| |IP version|ip\_version| |Parent Class|Relationship Type|Child Class| |------------|-----------------|-----------| |Server \[cmdb\_ci\_server\]|Owns:Owned by|IP Address \[cmdb\_ci\_ip\_address\]| ## Network Adapter \[cmdb\_ci\_network\_adapter\] The following attributes in the Network Adapter \[cmdb\_ci\_network\_adapter\] table are populated by collected data. |Attribute label|Attribute name| |---------------|--------------| |Mac Address|mac\_address| |Name|name| |Ip Default Gateway|ip\_default\_gateway| |Discovery Source|discovery\_source| |Parent Class|Relationship Type|Child Class| |------------|-----------------|-----------| |Server \[cmdb\_ci\_server\]|Owns:Owned by|Network Adapter \[cmdb\_ci\_network\_adapter\]| ## SentinelOne Additional Attributes \[sn\_sec\_sgc\_sntlone\_additonal\_attributes\] The following attributes in the SentinelOne Additional Attributes \[sn\_sec\_sgc\_sntlone\_additonal\_attributes\] table are populated by collected data. <table id="table_whf_nq3_ccc"><thead><tr><th> Attribute label </th><th> Attribute name </th></tr></thead><tbody><tr><td> NetworkInterfaces Name </td><td> networkinterfaces\_name </td></tr><tr><td> NetworkInterfaces GatewayMacAddress </td><td> networkinterfaces\_gatewaymacaddress </td></tr><tr><td> UUID </td><td> uuid </td></tr><tr><td> Configuration item </td><td> configuration\_item </td></tr><tr><td> Network Quarantine Enabled </td><td> network\_quarantine\_enabled </td></tr><tr><td> Last Successful Scan Date </td><td> last\_successful\_scan\_date </td></tr><tr><td> License\_Key </td><td> license\_key </td></tr><tr><td> First Discovered </td><td> first\_discovered </td></tr><tr><td> Location Enabled </td><td> location\_enabled </td></tr><tr><td> Ad ComputerDistinguishedName </td><td> ad\_computerdistinguishedname </td></tr><tr><td> Agent Version </td><td> agent\_version </td></tr><tr><td> Scan Status </td><td> scan\_status </td></tr><tr><td> Scan Started At </td><td> scan\_started\_at </td></tr><tr><td> ID </td><td> id </td></tr><tr><td> IP Address Subnet </td><td> ip\_address\_subnet </td></tr><tr><td> Mitigation Mode Suspicious </td><td> mitigation\_mode\_suspicious </td></tr><tr><td> Last Scan Finished At </td><td> last\_scan\_finished\_at </td></tr><tr><td> Firewall Enabled </td><td> firewall\_enabled </td></tr><tr><td> Console Migration Status </td><td> console\_migration\_status </td></tr><tr><td> Group ID </td><td> group\_id </td></tr><tr><td> Operational State Expiration </td><td> operational\_state\_expiration </td></tr><tr><td> Last IP To Mgmt </td><td> last\_ip\_to\_mgmt </td></tr><tr><td> Threat Reboot Required </td><td> threat\_reboot\_required </td></tr><tr><td> Machine Type </td><td> machine\_type </td></tr><tr><td> Is Pending Uninstall Ranger Status </td><td> Is\_pending\_uninstall ranger\_status </td></tr><tr><td> Ad LastUserDistinguishedName </td><td> ad\_lastuserdistinguishedname </td></tr><tr><td> Agent Up To Date </td><td> agent\_up\_to\_date </td></tr><tr><td> Ranger Version </td><td> ranger\_version </td></tr><tr><td> Last Boot Time </td><td> last\_boot\_time </td></tr><tr><td> Disk Encryption Status </td><td> disk\_encryption\_status </td></tr><tr><td> Mitigation Mode </td><td> mitigation\_mode </td></tr><tr><td> Last Full Scan </td><td> last\_full\_scan </td></tr><tr><td> Agent Uninstalled </td><td> agent\_uninstalled </td></tr><tr><td> Extenal Id </td><td> extenal\_id </td></tr><tr><td> Updated At </td><td> updated\_at </td></tr><tr><td> Last Scan Aborted At </td><td> last\_scan\_aborted\_at </td></tr><tr><td> Network Status </td><td> network\_status </td></tr><tr><td> Show Alert Icon </td><td> show\_alert\_icon </td></tr><tr><td> Subscribed On </td><td> subscribed\_on </td></tr><tr><td> Account ID </td><td> account\_id </td></tr><tr><td> Recently Active </td><td> recently\_active </td></tr><tr><td> Active Threats </td><td> active\_threats </td></tr><tr><td> Allow Remote Shell </td><td> allow\_remote\_shell </td></tr><tr><td> Site Name </td><td> site\_name </td></tr><tr><td> First Full Mode Time </td><td> first\_full\_mode\_time </td></tr><tr><td> Infected </td><td> infected </td></tr><tr><td> App Vulnerability Status </td><td> app\_vulnerability\_status </td></tr><tr><td> Site ID </td><td> site\_id </td></tr><tr><td> Agent Installer Type </td><td> agent\_installer\_type </td></tr><tr><td> Account Name </td><td> acount\_name </td></tr><tr><td> NetworkInterfaces Name </td><td> networkinterfaces\_name </td></tr><tr><td> NetworkInterfaces GatewayMacAddress </td><td> networkinterfaces\_gatewaymacaddress </td></tr><tr><td> NetworkInterfaces ID </td><td> networkinterfaces\_id </td></tr><tr><td> user\_actions\_needed </td><td> user\_actions\_needed </td></tr><tr><td> aws\_security\_group </td><td> aws\_security\_group </td></tr><tr><td> proxyState\_console </td><td> proxyState\_console </td></tr><tr><td> proxyState\_deepVisibility </td><td> proxyState\_deepVisibility </td></tr><tr><td> Ad UserPrincipalName </td><td> ad\_userPrincipalName </td></tr><tr><td> Ad ComputerMemberOf </td><td> ad\_computerMemberOf </td></tr><tr><td> Ad ComputerDistinguishedName </td><td> ad\_computerDistinguishedName </td></tr><tr><td> Ad LastUserMemberOf </td><td> ad\_lastUserMemberOf </td></tr><tr><td> Ad LastUserDistinguishedName </td><td> ad\_lastUserDistinguishedName </td></tr><tr><td> Ad Mail </td><td> ad\_mail </td></tr><tr><td> Agent Decommissioned </td><td> agent\_decommissioned </td></tr><tr><td> Agent Operational State </td><td> agent\_operational\_state </td></tr><tr><td> Last Active Date </td><td> last\_active\_date </td></tr><tr><td> Group Updated At </td><td> group\_updated\_at </td></tr><tr><td> Missing Permissions </td><td> missing\_permissions </td></tr></tbody> </table>## Service Graph Connector for SentinelOne Properties <table id="table_r4g_4r3_ccc"><thead><tr><th> Property </th><th> Description </th></tr></thead><tbody><tr><td> sn\_sec\_sgc\_sntlone.api\_page\_size </td><td> Enter the number of records per page to retrieve.- Type: string - Default value: 1000 - Location: System Property \[sys\_properties\] table </td></tr></tbody> </table>**Note:** To open the System Properties \[sys\_properties\] table, enter sys\_properties.LIST in the navigation filter.
| title | CMDB classes targeted in the Service Graph Connector for SentinelOne |
| description | When you complete setting up the connection, you can configure the integration to periodically pull data. The data is saved in tables that extend from the Configuration item \[cmdb\_ci\] table. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/servicenow-platform/service-graph-connectors/sgc-sentinelone-data-mapping.html |
| release | brazil |
| product | Service Graph Connectors |
| classification | service-graph-connectors |
| topic_type | reference |
| last_updated | 2026-09-10 |
| reading_time_minutes | 5 |
| breadcrumb | SentinelOneService Graph ConnectorsIntegrating third-party data into CMDBConfiguration ManagementExtend ServiceNow AI Platform capabilities |