Security

last person joined: 12 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

How to sort by the attribute of Endpoint

This thread has been viewed 1 times

  • 1.  How to sort by the attribute of Endpoint

    Posted Apr 10, 2020 09:38 PM

    Hi, we want to do a sort query based on the timestamp we stored in the attribute. But what's the syntax to do that? the default sort parameter is '-id' so we tried something like '-attribute:{expire_time}' and it doesn't work shows 422 

     "validation_errors": {
    "sort": "Cannot sort by field: attribute:start_time"
  },

     Appreciate for any help



  • 2.  RE: How to sort by the attribute of Endpoint

    EMPLOYEE
    Posted Apr 13, 2020 08:02 PM

    Replace id with expire_time or start_time. 

    Screen Shot 2020-04-13 at 4.59.12 PM.png

    Screen Shot 2020-04-13 at 4.59.30 PM.png

     



  • 3.  RE: How to sort by the attribute of Endpoint

    Posted Apr 13, 2020 08:20 PM

    jevolixy_0-1586823556542.png

    That doesn't work because the start_time is nested in the attributes



  • 4.  RE: How to sort by the attribute of Endpoint

    Posted Apr 13, 2020 08:22 PM

    jevolixy_0-1586823692571.png

    The same error, is this possible to sort on custom attributes?



  • 5.  RE: How to sort by the attribute of Endpoint

    EMPLOYEE
    Posted Apr 14, 2020 02:06 AM

    Ah, I tried for Guest accounts earlier. 

     

    Here in case of endpoints, start_time is part "attributes". CPPM does not support sorting based on attribute values. 



  • 6.  RE: How to sort by the attribute of Endpoint

    EMPLOYEE
    Posted Apr 17, 2020 09:16 AM

    I think I've got to the bottom of this. The problem is that the endpoint's attribute within the ClearPass RESTful API has been represented as a string (irrespective of the ClearPass' data definition): Numerical comparisons do not work. I have raised this question to Eng. Meanwhile can you store the start_time as a value?



  • 7.  RE: How to sort by the attribute of Endpoint

    Posted Apr 17, 2020 08:18 PM

    Oh, this is really bad. And it will limit so many functions for us, we also have some field stored as Numeric value and you are right we still can't query using $gte/$lte. We are using the Endpoint entity not the Device, can you help me point out how to add a custom property out of attribute. Thanks!