topic Re: I want to get a assessment report with serial number every 30 days, in Cortex XDR Discussions

I want to get a assessment report with serial number every 30 days,

C.Suw055939 — Mon, 27 Jan 2025 05:00:27 GMT

I want to get a assessment report with serial number every 30 days, the format should be like the one which we can download from assessment tab. Hope I should create xql query can someone help me on the same

Re: I want to get a assessment report with serial number every 30 days,

nar — Tue, 28 Jan 2025 06:12:55 GMT

Hi @C.Suw055939

Thank you for writing to LC!

Can you please describe more about which assessment report and serial number you are referring to?

Re: I want to get a assessment report with serial number every 30 days,

C.Suw055939 — Tue, 28 Jan 2025 06:23:30 GMT

I want to get assessment of client from cortex agent get information and some information such as computer name ,IP address but serial number of computer device i can't find in that console , if anyone know it please share information

Re: I want to get a assessment report with serial number every 30 days,

nar — Tue, 28 Jan 2025 08:57:19 GMT

Hi @C.Suw055939

Thank you for the details!

Serial number info is collected as part of host insight collection. If you have "Host insights" addon license then information will be available under system information in host_inventory dataset.
Here is the sample query, please include relevant fields as required.
dataset = host_inventory
| fields host_name, serial_number,ip_addresses

Here is the link if you are curious to learn about XQL - https://live.paloaltonetworks.com/t5/cortex-xdr-how-to-videos/cortex-xdr-basic-xql-crash-course/ta-p/544056

Best,