• Products
  • Get started
  • Documentation
  • Resources

Data Manager - NexThink Adapter

Assets Data Manager is currently a Premium and Enterprise only feature, and is available only to users who have enrolled in our Early Access Program (EAP).

Introduction

NexThink is a tool produced by the company with the same name. It is used for employee experience management.

NexThink Adapter uses an API connection to bring data into Assets Data Manager.

Before you begin setting up, request your NextThink Subject Matter Expert (SME) to ensure that the NexThink source is API enabled with relevant firewall rules established. Additionally, ensure that the credentials to access the source as well as the address of the source are available.

How do I connect this tool to Assets Data Manager?

Follow this procedure to connect this tool to Assets Data Manager using the custom-built Adapter:

  1. Gather all of the information listed in the Data Manager Fields section, such as the Name, Object class, Data Source Name, and Data Source Type.

  2. Gather all of the information in the NexThink Fields section - this may require consultation with the subject matter expert (SME) for NexThink.

  3. Within Data Manager:

    1. Create a new job by selecting the Adaptor that matches your tool.

    2. Configure all of the required fields with the appropriate information.

  4. Within NexThink:

    1. Follow all of the steps listed in the Authentication and Authorisation section, below, to properly configure Authentication and Authorisation.

    2. Review the information in the API Call section, below, and ensure the endpoints are available.

    3. Review the information in the Fields Retrieved section, below.

Each time this job is run, the data your have selected will be brought into Data Manager using the configured Adapter and become raw data.

Data Manager Fields

You will need to specify the following information from Assets Data Manager:

  1. Name - the name of the connection, visible as the job name in Adapters.

  2. Object Class - the name of the Object Class you want to the data to be loaded into.

  3. Data Source Name - the type of data being created; which is usually the tool name, e.g AD, Qualys etc. Note: This can be the same as Name.

  4. Data Source Type - what type of data is the tool providing? For example, Assets, CMDB, user location and more.

NexThink Fields

You will need to specify the following information from NexThink:

  1. Engine Address - the NexThink Engine IP Address or Domain Name Server (DNS).

    • for Nexthink Cloud, you must specify the domain name

    • for an on-premises Engine use the IP address

  2. Username - the username for authentication.

  3. Password - the password for authentication

  4. Table Name - the name of the table from where the data is to be imported

  1. Query Type - there are two types of queries:

    • Basic Query - select the table to obtain the desired information.

    • Advanced Query - the NexThink SME will write a query and provide that for inclusion in the Query field.

  2. Query - query field is used when an Advanced Query is selected, here you paste the NexThink query with details of the fields and tables required.

  3. Windows, MacOS, Mobile - Turn on each slider for devices that you want included in your results.  If you want devices running Windows, MacOS and any mobile operating system, then turn on all sliders.

API Call

The API call for NexThink is: Device.Read.All.

Fields Retrieved

For the basic query,

The following tables are available to consume data from -

  • Application

  • Binary

  • Destination

  • Device

  • Domain

  • Executable

  • Package

  • Port

  • Printer

  • Service

  • URL Path; or

  • User

Fields retrieved for table application -

An application is a set of executables e.g. 'Microsoft Office'.

1 2 3 4 5 6 7 8 9 10 11 company database_usage description first_seen id known_packages last_seen name platform storage_policy total_active_days

Fields retrieved for table binary -

A binary is an executable binary file identified by its hash code.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 application_category application_company application_name architecture average_cpu_usage average_memory_usage average_number_of_graphical_handles company database_usage description executable_name file_size first_seen hash id last_seen paths platform sha1 sha256 storage_policy threat_level total_active_days user_interface version

Fields retrieved for table destination -

A destination is a device or server receiving TCP/UDP connections.

1 2 3 4 5 6 database_usage first_seen id ip_address last_seen name

Fields retrieved for table device -

A device is Windows physical or virtual machine monitored by a Nexthink Collector.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 administrator_account_status all_antispywares all_antiviruses all_firewalls allow_non_provisionable_devices antispyware_name antispyware_rtp antispyware_up_to_date antivirus_name antivirus_rtp antivirus_up_to_date audit_account_logon_events audit_account_management audit_directory_service_access audit_logon_events audit_object_access audit_policy_change audit_privilege_use audit_process_tracking audit_system_events average_boot_duration average_fast_startup_duration average_logon_duration bios_serial_number boot_disk_health_status boot_disk_type chassis_serial_number cltr_ca_license_uid cltr_ca_status cltr_crash_guard_count cltr_crash_guard_limit cltr_crash_guard_protection_interval cltr_crash_guard_react_interval cltr_custom_shells cltr_data_channel_protocol cltr_dns_res_preference cltr_engage_service_status cltr_freezes_monitoring cltr_installs_scan_interval cltr_is_visible cltr_log_level cltr_max_segment_size cltr_ra_execution_policy cltr_string_tag cltr_web_mon_status collector_distinguished_name collector_installation_log collector_package_target_version collector_status collector_tag collector_update_status collector_version cpu_frequency cpu_model database_usage device_encryption_required device_manufacturer device_model device_password_required device_product_id device_product_version device_serial_number device_type device_uid device_uuid directory_service_site disks_manufacturers disks_smart_index distinguished_name eas_access_state eas_access_state_reason eas_device_access_rule eas_device_identity eas_exemption eas_policy_application_status eas_policy_name eas_policy_update email_attachment_enabled enforce_password_history entity extended_logon_duration_baseline firewall_name firewall_rtp first_seen graphical_card_ram graphical_cards group_name guest_account_status hard_disks id internet_security_settings ip_addresses is_collector_distinguished_name_truncated is_directory_service_site_truncated last_boot_duration last_extended_logon_duration last_ip_address last_known_connection_status last_local_ip_address last_logged_on_user last_logon_duration last_logon_time last_seen last_seen_on_tcp last_system_boot last_update last_update_status last_updater_request last_windows_update local_administrators local_power_users logical_cpu_number logical_drives mac_addresses maximum_password_age membership_type minimum_password_age minimum_password_length monitor_models monitor_resolutions monitors monitors_serial_numbers name number_of_antispyware number_of_antiviruses number_of_cores number_of_cpus number_of_days_since_first_seen number_of_days_since_last_boot number_of_days_since_last_eas_policy_update number_of_days_since_last_logon number_of_days_since_last_seen number_of_days_since_last_seen_on_tcp number_of_days_since_last_windows_update number_of_firewalls number_of_graphical_cards number_of_monitors os_architecture os_build os_version_and_architecture password_complexity_requirements platform privileges_of_last_logged_on_users sd_card_encryption_required sid storage_policy system_drive_capacity system_drive_free_space system_drive_usage total_active_days total_drive_capacity total_drive_free_space total_drive_usage total_nonsystem_drive_capacity total_nonsystem_drive_free_space total_nonsystem_drive_usage total_ram updater_error updater_version upgrade_group user_account_control_status windows_license_key windows_updates_status wmi_status

Fields retrieved for table domain -

A domain is a domain name.

1 2 3 4 5 6 7 8 9 10 11 12 13 database_usage domain_category first_seen hosting_country hostname id internal_domain last_seen name protocol response_size storage threat_level

Fields retrieved for table executable -

An application is an executable program e.g. 'winword.exe'.

1 2 3 4 5 6 7 8 9 10 11 12 application_company application_name database_usage description first_seen id known_packages last_seen name platform storage_policy total_active_days

Fields retrieved for table package -

A package is a software package (programs or updates).

1 2 3 4 5 6 7 8 9 10 11 12 13 first_installation first_seen id name number_of_updates platform program publisher status type version windows_7_32bit_compatibility windows_7_64bit_compatibility

Fields retrieved for table port -

A port is a TCP or UDP connection port.

1 2 3 4 5 6 first_seen id last_seen port_number port_type port_value

Fields retrieved for table service -

A service represents an IT service in your organization, such as the mail service or the directory service.

1 2 3 4 id name status type

Fields retrieved for table url_path -

A url_path is a URL path after the domain name.

1 2 id path

Fields retrieved for table user -

A user is an object that represents an individual account in a device (local user) or in a group of devices (domain user). The account may identify a physical user or a system user.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 country database_usage department distinguished_name first_seen full_name id job_title last_seen locality location name number_of_days_since_last_seen org_unit seen_on_mac_os seen_on_mobile seen_on_windows sid total_active_days type user_uid



Still need help?

The Atlassian Community is here for you.