Query Operators and Search Fields
This chapter describes the query operators and search fields that you can use with the query parameter.
Valid Query Operators
The query parameter supports the following operators:
|
Priority |
Operator |
Operation |
|
1 |
= |
Equals and case-insensitive string comparison |
|
2 |
> |
Is greater than |
|
3 |
>= |
Is greater than or equal to |
|
4 |
< |
Is less than |
|
5 |
<= |
Is less than or equal to |
|
6 |
"contains" |
Case-insensitive substring matching |
|
7 |
"starts with" |
Case-insensitive prefix matching |
|
8 |
!= |
Not Equals |
|
9 |
"does not contain" |
Case-insensitive substring exclusion |
|
10 |
"is empty" |
Is empty |
|
11 |
"is not empty" |
Is not empty |
Valid Search Fields
The device search fields include:
•those that are common to all
•Android-only
•iOS-only
•Windows-Phone-only
•user-related, including LDAP.
Common Device Search Fields
Field name format:
"common.<field_name>"
|
Field |
Data Type |
Sample Data |
Description |
|
apns_capable |
boolean |
e43f9c41484baf6601b2e80f7390fe195df5 |
|
|
background_status |
string |
Background Status:0=Enabled, 1=Denied by User, 2=Disabled by Policy, 3=Device not supported, 4=OS not supported, 5=Unknown |
|
|
battery_level |
long |
15 99 |
|
|
|
|||
|
blocked_reasons |
array of strings |
2 |
|
|
blocked |
boolean |
2 |
|
|
cellular_technology |
string |
GSM |
|
|
client_id |
long |
1073741831 |
|
|
client_name |
string |
com.mobileiron |
|
|
client_build_date |
date |
Aug 29 2013 13:02:18 |
|
|
client_version |
string |
5.7.0.1.17R |
|
|
|
|||
|
comment |
string |
|
|
|
noncompliance_reasons |
array of strings |
3 |
|
|
compliant |
boolean |
3 |
|
|
creation_date |
date |
|
|
|
current_country_code |
string |
US |
|
|
current_country_name |
string |
United States |
|
|
current_operator_name |
string |
AT&T |
|
|
current_phone_number |
string |
PDA |
|
|
data_protection_enabled |
boolean |
|
|
|
data_protection_reasons |
array of strings |
|
|
|
device_admin_enabled |
boolean |
|
|
|
device_is_compromised |
boolean |
|
|
|
device_space_ids |
array of long values |
|
|
|
device_space_name |
string |
|
|
|
device_space_path |
string |
|
|
|
display_size |
string |
1184X768 768x1280 |
|
|
|
|||
|
eas_last_sync_time |
date |
|
|
|
ethernet_mac |
string |
10DDB1F23C06 |
|
|
home_country_code |
string |
FR |
|
|
home_country_name |
string |
France |
|
|
home_operator_name |
string |
France Telecom |
|
|
home_phone_number |
string |
PDA |
|
|
id |
long |
5 |
|
|
imei |
string |
|
|
|
|
|||
|
|
|||
|
imsi |
string |
|
|
|
ip_address |
string |
169.254.80.80, fe80::7091:fe10:7d67:ed67 172.16.2.123 |
|
|
|
|||
|
language |
string |
English |
|
|
language_id |
long |
|
|
|
lang_country_id |
long |
5 |
|
|
last_connected_at |
date |
Internal business logic is used to determine which timestamp gets indexed. |
|
|
locale |
string |
en-US es-US |
|
|
|
|||
|
location_last_captured_at |
date |
1383608236206 |
|
|
location |
geo_point |
37.396003 -122.056255 |
|
|
|
|||
|
manufacturer |
string |
Apple |
|
|
memory_capacity |
long |
832.44M 3220754432 |
|
|
|
|||
|
memory_free |
long |
326.89M 1802539008 |
|
|
|
|||
|
mdm_managed |
boolean |
t |
|
|
mdm_tos_accepted |
boolean |
true |
|
|
mdm_to_accepted_date |
date |
1418672009316 |
|
|
model |
string |
iPad, 4th gen |
|
|
model_name |
string |
Virtual Machine |
|
|
|
|||
|
os_version |
string |
iPhone OS 6.1.3 (10B329) 17 8.0.10327.77 6.1.3 |
|
|
|
|||
|
|
|||
|
|
|||
|
owner |
string |
f |
|
|
pending_device_passcode |
string |
123456 |
|
|
pending_device_passcode_expiration_time |
date |
|
|
|
platform_name |
string |
iOS 7.1 |
|
|
platform |
string |
I |
|
|
processor_architecture |
string |
ARM armeabi-v7a 5 Intel64 Family 6 Model 58 Stepping 9 |
|
|
|
|||
|
|
|||
|
|
|||
|
quarantined_action |
long |
|
|
|
quarantined_reasons |
array of strings |
32768 |
|
|
quarantined |
boolean |
32768 |
|
|
registration_date |
date |
1390244908000 |
|
|
registration_imsi |
string |
310260000000000 |
|
|
registration_uuid |
string |
c36f759717140acf AB7C0056-C1BE-4096-B630-A54376DEDA4F |
This is from the miclient, a randomly generated UUID to identify registration information for this miclient. |
|
retired |
boolean |
f |
|
|
roaming |
boolean |
f |
|
|
security_state |
string |
Ok 1 |
Indicates whether a device has been rooted or jailbroken. |
|
SerialNumber |
string |
DMQL3K0RF182 |
|
|
status |
string |
a |
|
|
storage_capacity |
long |
6627926015.9999999463129088 |
|
|
storage_free |
long |
5725888511.9999999463129088 |
|
|
uuid |
string |
c5e6872e-3a4b-4fbd-bb2b-... |
|
|
wifi_mac_address |
string |
00:15:5D:9A:FC:6B A88808C9332C 40b0fac53dbd |
|
Android-Only Device Search Fields
Field name format:
"android.<field_name>"
|
Field |
Data Type |
Sample Data |
Description |
|
admin_activated |
boolean |
TRUE |
|
|
attestation |
string |
true |
|
|
afw_capable |
boolean |
true |
|
|
brand |
string |
|
|
|
c2dmToken |
string |
APA91bF0OvND3ubyu... |
|
|
codename |
string |
REL |
|
|
device |
string |
mako |
|
|
device_roaming_flag |
string |
off |
|
|
gcmToken |
boolean |
non null=true, null=false |
|
|
incremental |
string |
573038 |
The firmware version on the device.
|
|
knox_version |
string |
|
|
|
manufacturer_os_version |
string |
|
|
|
mdm_enabled |
boolean |
TRUE |
|
|
media_card_capacity |
long |
5803.04M |
|
|
media_card_free |
long |
5562.67M |
|
|
multi_mdm |
boolean |
FALSE |
Indicates that there is more than one device administrator on the device. |
|
os_build_number |
string |
JDQ39 |
|
|
os_update_status |
string |
OK |
Indicates whether an OS update is available. Values include: Unavailable, Available, Unsupported. Status of ROM update for devices that support it. |
|
platform_flags |
string |
0x3 |
A flag that identifies device capabilities. |
|
samsung_dm |
string |
|
|
|
secure_apps_encryption_enabled |
boolean |
"Ready" |
|
|
secure_apps_encryption_mode |
string |
|
|
|
secure_apps_enabled |
boolean |
"not enabled" |
Indicates whether secure apps are enabled on the device. |
|
security_detail |
string |
"0" |
A bitmask, 32 bit hex number, representing all detected threads that have compromised the device. |
|
usb_debugging |
boolean |
off |
|
|
zebra_ota_capable |
boolean |
true |
Indicates whether the device is Zebra LifeGuard OTA capable. |
iOS and OS X Device Search Fields
Field name format:
"ios.<field_name>"
|
Field |
Data Type |
Sample Data |
Description |
|
Activation Lock Bypass Code |
string |
JX17H-R0A7Z-E06R-X923-VUF8-81F3 |
|
|
Activation Lock Is Enabled |
boolean |
false |
|
|
apnsToken |
string |
e43f9c41484baf6601b2e80f7390fe195df5... |
|
|
BluetoothMAC |
string |
A88808C93459 |
|
|
BuildVersion |
string |
5.1 |
|
|
CarrierSettingsVersion |
string |
11.0 |
|
|
Current MCC |
string |
310 |
|
|
Current MNC |
string |
410 |
|
|
DataRoamingEnabled |
boolean |
false |
|
|
data_protection |
string |
|
|
|
DeviceName |
string |
Rui's iPad |
|
|
forceEncryptedBackup |
boolean |
TRUE |
|
|
HardwareEncryptionCaps |
long |
3 |
Hardware encryption capabilities, bitfield:bit 0: block-level encryption, bit 1: file-level encryption. |
|
help_desk_enabled |
boolean |
|
|
|
iCloud Backup Is Enabled |
boolean |
true |
|
|
iOSBackgroundStatus |
string |
0 |
A value the client returns, indicating its status. Possible values are: 0=Enabled, 1=Denied by User, 2=Disabled by Policy, 3=Device not supported, 4=OS not supported, 5=Unknown. |
|
ip_address |
string |
172.16.2.123 |
|
|
iPhone ICCID |
string |
|
|
|
iPhone PRODUCT |
string |
iPad3,4 |
|
|
iPhone UDID |
string |
b37aea9c3883e5a0ddfadab5d82d7ea2d4... |
|
|
iPhone VERSION |
string |
10B329 |
|
|
iPhone MAC_ADDRESS_EN0 |
string |
4CECE5D3A198 |
|
|
iPhone UserLongName |
string |
John Smith |
|
|
iPhone UserShortName |
string |
John |
|
|
iPhone UserID |
string |
BF3DDF91-3CB7-40A5-B2F4-2F0E77167113 |
|
|
IsDEPEnrolledDevice |
boolean |
true |
|
|
IsDeviceLocatorServiceEnabled |
boolean |
true |
Returns MDM data when sending a request for device information on devices running iOS 7 through the most recently released version as supported by Ivanti, Inc. |
|
IsDoNotDisturbInEffect |
boolean |
true |
|
|
iTunes Store Account Hash |
string |
EPMtjvzUBKKvhUJA9VOyvrQXkJI= |
|
|
iTunesStoreAccountIsActive |
boolean |
false |
Indicates whether the device user is logged into an active Apple App Store account on devices running iOS 7 and OS X 10.9 through the most recently released versions as supported by Ivanti, Inc. |
|
it_policy_result |
long |
1 |
|
|
Last iCloud Backup Date |
string |
2014-07-25 11:58:38 PM |
|
|
ModemFirmwareVersion |
string |
04.11.08 |
|
|
ProductName |
string |
iPad3,4 |
|
|
PasscodePresent |
boolean |
FALSE |
Indicates whether an MDM passcode is present (TRUE or FALSE). |
|
PasscodeIsCompliantWithProfiles |
boolean |
TRUE |
Indicates whether the passcode of the MDM data user is compliant with the passcode profile (TRUE or FALSE). |
|
PasscodeIsCompliant |
boolean |
TRUE |
|
|
Personal Hotspot Enabled |
boolean |
false |
|
|
security_reason_code |
string |
0x40000000 |
|
|
Supervised |
boolean |
FALSE |
|
|
signal_strength |
long |
31 |
|
|
SIM MCC |
string |
310 |
|
|
SIM MNC |
string |
410 |
|
|
Subscriber Carrier Network |
string |
AT&T |
|
|
Voice Roaming Enabled |
boolean |
N/A false true |
|
|
|
|||
|
|
|||
|
vpn_ip_address |
string |
|
|
|
Wakeup Status |
integer |
0 |
|
Windows Phone and Surface Device Search Fields
Field name format:
"windows_phone.<field_name>"
|
Field |
Data Type |
Sample Data |
Description |
|
dm_client_version |
double |
1.3 |
|
|
network_adapter |
string |
Hyper-V Virtual Ethernet Adapter #2 |
|
|
processor_type |
string |
Intel(R) Ivanti EPMM(TM) i5-3570 CPU @ 3.40GHz |
|
|
wns_channel_url |
string |
https://bn1.notify.windows.com/?token=AgYAAAC1r8nFA5Uhc |
|
|
wp_cert_renew_timestamp |
date |
0 |
Optional. The time in OMA DM (Open Mobile Alliance Device Management) standard time format. This node and the SignedCertRenewTimeStamp node are designed to reduce the risk of the certificate being used by another phone. The phone records the time that the new certificate was created. Supported operation is Get. |
|
wp_ent_dm_id |
long |
0 |
Optional. Character string that contains the device ID. This node and the nodes CertRenewTimeStamp and SignedCertRenewTimeStamp can be used by the mobile device management server to verify client identity, so as to update the registration record after the phone certificate is renewed. The phone signs the EntDMID with the old client certificate during the certificate renewal process, and saves the signature locally. Supported operation is Get. |
|
wp_exchange_id |
string |
37D9EC65D7F9CC35AF5B8B944256361A |
|
|
wp_firmware_version |
string |
3045.0000.1328.2046 |
|
|
wp_hardware_version |
string |
1.0.0.0 |
|
|
wp_local_time |
date |
2013-10-22T20:08:07.0000258-04:00 |
|
|
wp_processor_type |
long |
0 |
|
|
wp_signed_ent_dm_id |
long |
0 |
|
|
wp_management_service_address |
string |
|
|
|
wp_mpns_notification_uri |
string |
|
|
|
wp_os_platform |
string |
|
|
|
wp_radio_swv |
string |
|
|
|
wp_publisher_device_id |
string |
|
|
|
wp_ent_device_name |
string |
|
User-Related Device Search Fields
The set of user-related device search fields include:
•local user search fields
•LDAP search fields
Local User Device Search Fields
Field name format:
"user.<field_name>"
|
Field |
Data Type |
Sample Data |
|
email_address |
string |
|
|
display_name |
string |
BlargleFalargle |
|
first_name |
string |
Bob |
|
last_admin_portal_login_time |
date |
1382485711228 |
|
last_name |
string |
Smith |
|
user_id |
string |
blargle |
|
uuid |
string |
d0cae3dd-a3dd-46b8-8f5a-564cbe9152ac |
LDAP-User Device Search Fields
LDAP-related search fields include:
•basic LDAP-related device search fields
•groups
Basic LDAP-User Device Search Fields
Field name format:
"user.ldap.<field_name>"
|
Field |
Data Type |
|
attr_dn |
string |
|
dn |
string |
|
locale |
string |
|
principal |
string |
|
upn |
string |
LDAP User-Attributes Device Search Fields
Field name format:
"user.ldap.user_attributes.<field_name>"
|
Field |
Data Type |
|
custom1 |
string |
|
custom2 |
string |
|
custom3 |
string |
|
custom4 |
string |
|
string |
|
|
string |
|
|
string |
|
|
string |
|
|
<dynamically created user-attribute field names> |
array of strings |
LDAP-Group Device Search Fields
Field name format:
"user.ldap.groups.<field_name>"
|
Field |
Data Type |
|
dn |
string |
|
name |
string |
Value Enumerations
Values for the "platform" Device Search Field
|
Value |
|
Android |
|
iOS |
|
OS X |
|
Windows |
|
Windows Phone |
Values for the "platform_name" Device Search Field
|
Value |
|
Android |
|
Android 1.6 |
|
Android 2.0 |
|
Android 2.0.1 |
|
Android 2.1 |
|
Android 2.2 |
|
Android 2.3 |
|
Android 3.0 |
|
Android 3.1 |
|
Android 4.0 |
|
Android 4.0.1 |
|
Android 4.0.2 |
|
Android 4.0.4 |
|
Android 4.1 |
|
Android 4.2 |
|
Android 4.3 |
|
Android 4.4 |
|
AppleTV |
|
AppleTV 7.0 |
|
BlackBerry |
|
iOS |
|
iOS 4.0 |
|
iOS 4.1 |
|
iOS 4.2 |
|
iOS 4.3 |
|
iOS 5.0 |
|
iOS 5.1 |
|
iOS 6.0 |
|
iOS 6.1 |
|
iOS 7.0 |
|
iOS 7.1 |
|
OS X |
|
OS X 10.7 |
|
OS X 10.8 |
|
OS X 10.9 |
|
Web App Platform |
|
Windows |
|
Windows 10 |
|
Windows 8.1 |
|
Windows Phone |
|
Windows Phone 8 |
|
Windows Phone 8.1 |
Values for the "status" Device Search Field
|
Enum Name |
Meaning |
|
ACTIVE |
Active |
|
BLOCKED |
Blocked |
|
IENROLL_VERIFIED |
Enrollment verified |
|
IENROLL_INPROGRESS |
Enrolling |
|
IENROLL_COMPLETE |
Enrolled |
|
INFECTED |
Infected |
|
LOST |
Lost |
|
RETIRED |
Retired |
|
VERIFIED |
Verified |
|
VERIFICATION_PENDING |
Pending |
|
EXPIRED |
Expired |
|
WIPED |
Wiped |
|
WIPE_PENDING |
Wipe pending |
|
UNKNOWN |
Unknown status |
Values for the "owner" Device Search Field
|
Name |
Meaning |
|
COMPANY |
Company-owned device |
|
EMPLOYEE |
Employee-owned (personal) device |
Array Value Enumerations
Values for the "blocked_reasons", "noncompliance_reasons", and "quarantined_reasons" Device Search Fields
Each of the fields that use these values have an associated field to determine whether any reasons were set or not. For example, if a device is blocked, then the "blocked_reasons" field has a list of reasons, and the "blocked" field is 'true'.
|
Enum Name |
Meaning |
Hexadecimal Value |
|
ALLOWED_APP_CONTROL |
Allowed app control policy is out of compliance |
0x004000 |
|
APP_CONTROL |
App control policy is out of compliance |
0x000040 |
|
ATTESTATION_FAILED |
Attestation failed. |
0x010000 |
|
AUTO_BLOCK |
Device is not registered |
0x000100 |
|
COMPROMISED |
Device state is compromised |
0x000001 |
|
DATA_PROTECTION |
Data Protection is not enabled |
0x000008 |
|
DEVICE_ADMIN_DEACTIVE |
Device administrator is deactivated |
0x000800 |
|
DEVICE_OUT_OF_CONTACT |
Phone is out of contact |
0x000020 |
|
DISALLOWED_APP_CONTROL |
Disallowed app control policy is out of compliance |
0x001000 |
|
EXCHANGE |
Exchange-reported |
0x000400 |
|
HW_VERSION |
Hardware revision is not allowed |
0x000004 |
|
LOGGED_OUT |
User logged out |
0x008000 |
|
MANUAL |
Device is manually blocked |
0x000200 |
|
OS_VERSION |
OS version is less than the supported OS version |
0x000002 |
|
PER_MAILBOX_LIMIT |
Device exceeds per mailbox limit |
0x000080 |
|
POLICY_OUT_OF_DATE |
Policy is out of date |
0x000010 |
|
REQUIRED_APP_CONTROL |
Required app control policy is out of compliance |
0x002000 |
|
UNKNOWN |
Unknown reason |
0x400000 |