The connector only reads data. It never creates, changes or deletes anything in Magma3.
Configuring Magma3 as a Source
In the Sources tab, click on the “Add source” button located on the top right of your screen. Then, select the Magma3 option from the list of connectors. Click Next and you’ll be prompted to add your access.1. Add account access
The connector signs in with a Magma3 API credential. In the Magma3 Console, open Integrações in the side menu, click Adicionar and select Magma3. Fill in a name, a login and a password, choose which modules the credential may read and save it. A read-only credential is enough. Write down the password: Magma3 does not show it again.
The following configurations are available:
- Company: The short company name you type when signing in to the Magma3 Console.
- Username: The login of the API credential.
- Password: The password of the API credential.
- Start Date: Earliest date read by the event tables (geolocations, non-compliances, prints, active windows and Alaska actions) on the first sync and on full syncs, by the date Magma3 received each record. Inventory, user and IAM tables are always read in full.
2. Select streams
Choose which data streams you want to sync. For faster extractions, select only the streams that are relevant to your analysis. You can select entire groups of streams or pick specific ones.Tip: The stream can be found more easily by typing its name.Select the streams and click Next.
3. Configure data streams
Customize how you want your data to appear in your catalog. Select the desired layer where the data will be placed, a folder to organize it inside the layer, a name for each table (which will effectively contain the fetched data) and the type of sync.- Layer: choose between the existing layers on your catalog. This is where you will find your new extracted tables as the extraction runs successfully.
- Folder: a folder can be created inside the selected layer to group all tables being created from this new data source.
- Table name: we suggest a name, but feel free to customize it. You have the option to add a prefix to all tables at once and make this process faster!
- Sync Type: you can choose between INCREMENTAL and FULL_TABLE.
- Incremental: every time the extraction happens, we’ll get only the new data, which is good if, for example, you want to keep every record ever fetched.
- Full table: every time the extraction happens, we’ll get the current state of the data, which is good if, for example, you don’t want to have deleted data in your catalog.
4. Configure data source
Describe your data source for easy identification within your organization, not exceeding 140 characters. To define your Trigger, consider how often you want data to be extracted from this source. This decision usually depends on how frequently you need the new table data updated (every day, once a week, or only at specific times). Optionally, you can define some additional settings:- Configure Delta Log Retention and determine for how long we should store old states of this table as it gets updated. Read more about this resource here.
- Determine when to execute an Additional Full Sync. This will complement the incremental data extractions, ensuring that your data is completely synchronized with your source every once in a while.
5. Check your new source
You can view your new source on the Sources page. If needed, manually trigger the source extraction by clicking on the arrow button. Once executed, your data will appear in your Catalog.Streams and Fields
Available streams
The table below lists every stream, its slug (the exact identifier to pass when creating the source via API), the Magma3 module the credential must be allowed to read, and a short description.Things to know
- Date of the record vs. date of the activity. Incremental tables follow
date_creation, the moment Magma3 received the record. A computer that was offline sends its events later, sodate_creationcan be hours or days after the activity. For the real time of the activity usefocus_start_dateandfocus_end_date(active windows),date_print_sent(prints) ordate(geolocations). - Nested lists (an asset’s RAM modules, disks, network cards, printers and maintenances; a profile’s permissions) are stored as JSON text columns.
- Records without an id. Software, services, certificates, geolocations and non-compliances have no identifier in Magma3; the connector computes
row_keyfrom the whole record and uses it as the key. - Answers capped at 100 records. Magma3 returns at most 100 records per request. The software and services of one asset, and the IAM users and profiles, come in a single answer with no pagination: when an answer has exactly 100 records, the table is loaded with what was returned and the sync log warns that some records may be missing.
- Many events in the same millisecond. When 100 or more events share the same millisecond (for example, a computer that was offline sending its backlog at once), Magma3’s API cannot return them all. For Bluesky Active Windows and the Alaska tables the connector reads that instant again user by user (this needs the credential to read Bluesky Users), which recovers most records, but events without a known user may still be missing. So whenever this happens the sync log warns about it and, for incremental tables, the table’s run is marked as failed; the records read and the progress of the table are kept.
- Per-asset tables. Force1 Software and Force1 Services send one request per asset: about 6 minutes per 1,000 assets for each table. When Magma3 requires it, Force1 Geolocations is also read asset by asset, with about the same time per 1,000 assets. If Magma3 answers “not found” for an asset (usually one removed during the sync), it is skipped; for geolocations, the next sync reads that period again.
- Tables that cannot be read. If Magma3 refuses a table (the credential cannot read its module) or its requests keep failing, that table is skipped, the sync log names it, and the other tables keep syncing.
- New fields. Fields Magma3 starts sending that the connector does not know yet are kept in the
extra_fieldsJSON column.
Fields by stream
Below you’ll find all available data streams from Magma3 and their corresponding fields:Force1 Assets
Force1 Assets
Stream
force1_assets (module Force1). Full table; key id.id- Unique identifier of the asset in Magma3name- Asset name (for computers, the host name)type- Asset type (e.g. computador, monitor, switch)subtype- Asset subtypecompliance- Compliance status of the asset against the account’s Force1 policieshelper_id- Helper (support) identifier of the assetheritage_asset- Patrimony (fixed-asset) tag number of the assetserial_number- Serial number of the assetmodel- Asset modelmanufacturer- Asset manufacturertag- Tag assigned to the asset in Magma3observations- Free-text observations recorded for the assetassociate_assets- Other assets associated with this onewidth- Width of the asset, as registeredheight- Height of the asset, as registeredinch- Screen size in inches (monitors and notebooks)weight- Weight of the asset, as registeredrate_depreciation- Depreciation rate registered for the assetacquisition_date- Date the asset was acquiredmanufacturing_date- Date the asset was manufacturedvalidity_date- Warranty or validity end date of the assetreal_value- Acquisition value of the asset in Brazilian reais (BRL)dolar_value- Acquisition value of the asset in US dollarsreal_residual_value- Current residual (depreciated) value of the asset in Brazilian reais (BRL)dolar_residual_value- Current residual (depreciated) value of the asset in US dollarsnetwork_public_ip- Public IP address the asset last reported frommotherboard_name- Motherboard namemotherboard_manufacturer- Motherboard manufacturermotherboard_part_number- Motherboard part numbermotherboard_model- Motherboard modelmotherboard_version- Motherboard versionoperating_system_name- Operating system nameoperating_system_description- Operating system descriptionoperating_system_bits_architecture- Operating system architecture (32 or 64 bits)operating_system_last_logged_user- Last user logged in to the operating systemoperating_system_domain- Network domain the computer belongs tooperating_system_activation_key- Operating system activation (product) keyoperating_system_ram_memory_raw- Total RAM reported by the operating system, as a raw number (bytes)operating_system_memory_ram- Total RAM reported by the operating system, formatted for displayoperating_system_registered_user- User the operating system is registered tooperating_system_enterprise- Organization the operating system is registered tooperating_system_serial- Operating system serial numberoperating_system_service_pack- Operating system service packoperating_system_version- Operating system versionprocessor_name- Processor nameprocessor_description- Processor descriptionprocessor_bits_architecture- Processor architecture (32 or 64 bits)processor_phisycal_cores- Number of physical processor coresprocessor_logical_cores- Number of logical processor cores (threads)processor_l2_cache- Processor L2 cache size, formatted for displayprocessor_l2_cache_raw- Processor L2 cache size as a raw numberprocessor_l3_cache- Processor L3 cache size, formatted for displayprocessor_l3_cache_raw- Processor L3 cache size as a raw numberprocessor_manufacturer- Processor manufacturerprocessor_max_frequency- Processor maximum frequency, formatted for displayprocessor_max_frequency_raw- Processor maximum frequency as a raw number (MHz)processor_socket- Processor socketbios_name- BIOS namebios_description- BIOS descriptionbios_version- BIOS versionbios_build- BIOS buildbios_manufacturer- BIOS manufacturerbios_serial- BIOS serial numberbios_smbios_version- SMBIOS version reported by the BIOSsim_card_imei1- IMEI of the first SIM slot (mobile devices)sim_card_imei2- IMEI of the second SIM slot (mobile devices)agent_data_last_communication- Last time the Force1 agent on the asset communicated with Magma3agent_version- Version of the Force1 agent installed on the assetagent_installed- Whether the Force1 agent is installed, as displayed by Magma3agent_installed_raw- Whether the Force1 agent is installed on the assetadministrative_unit_id- Identifier of the administrative unit the asset belongs toadministrative_unit_acronym- Acronym of the administrative unit the asset belongs toadministrative_unit_name- Name of the administrative unit the asset belongs toadministrative_unit_hierarchy- Full hierarchy path of the administrative unit the asset belongs toactive_network_card_name- Name of the active network cardactive_network_card_gateway- Default gateway of the active network cardactive_network_card_dhcp_server- DHCP server of the active network cardactive_network_card_domain_suffix_dns- DNS domain suffix of the active network cardactive_network_card_search_dns_order- DNS search order of the active network cardactive_network_card_ip- IP address of the active network cardactive_network_card_mac_address- MAC address of the active network cardactive_network_card_mask- Subnet mask of the active network cardactive_network_card_primary_wins- Primary WINS server of the active network cardactive_network_card_secondary_wins- Secondary WINS server of the active network cardactive_network_card_manufacturer- Manufacturer of the active network cardactive_network_card_part_number- Part number of the active network cardactive_network_card_version- Version of the active network cardactive_directory_computer_enabled- Whether the computer account is enabled in Active Directoryactive_directory_computer_description- Description of the computer account in Active Directoryactive_directory_computer_distinguished_name- Distinguished name of the computer account in Active Directorypartitions- Disk partitions of the asset (name and capacity) (JSON)initialized_programs- Programs started with the operating system (name and path) (JSON)logical_storages- Logical drives of the asset (file system, capacity, free space) (JSON)sharings- Shared folders of the asset (JSON)users- Local and domain user accounts found on the asset (JSON)users_profiles- User profiles found on the asset (JSON)ram_memorys- RAM modules installed (capacity, frequency, manufacturer, serial) (JSON)graphic_cards- Graphics cards installed (JSON)sound_cards- Sound cards installed (JSON)mouses- Mice connected (JSON)keyboards- Keyboards connected (JSON)cds_rom- CD/DVD drives installed (JSON)network_cards- Network cards installed (IP, MAC address, gateway, DNS) (JSON)storages- Physical disks installed (model, capacity, serial) (JSON)printers- Printers installed on the asset (JSON)maintenances- Maintenance records of the asset (date, type, responsible, status, value) (JSON)extra_fields- Fields the API returned that this connector does not map to a column yet, keyed by their original names (JSON)
Force1 Software
Force1 Software
Stream
force1_softwares (module Force1). Full table; key row_key.asset_id- Identifier of the asset the software is installed on (see force1_assets)asset_name- Name of the asset the software is installed onname- Software nameversion- Installed versionmanufacturer- Software publisheractivation_key- Activation (license) key found for the softwareidentification_number- Identification number of the installed softwarepackage_address- Installation package locationpackage_code- Installation package coderow_key- Identifier computed by the connector from the whole record (SHA-1), because Magma3 gives this object no id of its ownextra_fields- Fields the API returned that this connector does not map to a column yet, keyed by their original names (JSON)
Force1 Services
Force1 Services
Stream
force1_services (module Force1). Full table; key row_key.asset_id- Identifier of the asset the service runs on (see force1_assets)asset_name- Name of the asset the service runs onname- Service namedisplay_name- Display name of the servicedescription- Service descriptionproccess_id- Process id of the running servicestartup_type- Startup type (automatic, manual, disabled)login- Account the service logs on asstate- Current state of the service (running, stopped)exit_code- Last exit code of the serviceexecutable_address- Path of the service executableaccount_execution- Account the service runs underrow_key- Identifier computed by the connector from the whole record (SHA-1), because Magma3 gives this object no id of its ownextra_fields- Fields the API returned that this connector does not map to a column yet, keyed by their original names (JSON)
Force1 Certificates
Force1 Certificates
Stream
force1_certificates (module Force1). Full table; key row_key.asset_id- Identifier of the asset the certificate was found on (see force1_assets)asset_name- Name of the asset the certificate was found onname- Certificate namesender- Issuer of the certificateissued_to- Subject the certificate was issued tovalid_date_start- Start of the certificate validityvalid_date_end- End of the certificate validity (expiration)finger_print- Certificate fingerprint (thumbprint)serial_number- Certificate serial numberrepository_name- Certificate store the certificate is inrepository_usage- Usage of the certificate storerow_key- Identifier computed by the connector from the whole record (SHA-1), because Magma3 gives this object no id of its ownextra_fields- Fields the API returned that this connector does not map to a column yet, keyed by their original names (JSON)
Force1 Geolocations
Force1 Geolocations
Stream
force1_geolocations (module Force1). Incremental by date_creation; key row_key.asset_id- Identifier of the asset that reported the location (see force1_assets)asset_name- Name of the asset that reported the locationdate- When the asset was at this locationdate_creation- When Magma3 received and stored this record, used as the incremental replication keylast_logged_user- User logged in to the asset at the timelatitude- Latitudelongitude- Longitudecountry- Countrystate- Statecity- Cityzip_code- Postal codestreet- Streetneighborhood- Neighborhoodnumber- Street numberrow_key- Identifier computed by the connector from the whole record (SHA-1), because Magma3 gives this object no id of its ownextra_fields- Fields the API returned that this connector does not map to a column yet, keyed by their original names (JSON)
Force1 Non-compliances
Force1 Non-compliances
Stream
force1_non_compliances (module Force1). Incremental by date_creation; key row_key.date_creation- When Magma3 recorded the non-compliance, used as the incremental replication keyorder- Position of the record in the non-compliance analysisasset_id- Identifier of the non-compliant asset (see force1_assets)asset_name- Name of the non-compliant assetasset_administrative_unity_hierarchy- Administrative unit hierarchy of the assetpolicy_name- Name of the compliance policy that was violatedfield1- Value of column 1 of the non-compliance report, whose meaning depends on the policy (scalar text or JSON) (JSON)field2- Value of column 2 of the non-compliance report, whose meaning depends on the policy (scalar text or JSON) (JSON)field3- Value of column 3 of the non-compliance report, whose meaning depends on the policy (scalar text or JSON) (JSON)field4- Value of column 4 of the non-compliance report, whose meaning depends on the policy (scalar text or JSON) (JSON)field5- Value of column 5 of the non-compliance report, whose meaning depends on the policy (scalar text or JSON) (JSON)field6- Value of column 6 of the non-compliance report, whose meaning depends on the policy (scalar text or JSON) (JSON)field7- Value of column 7 of the non-compliance report, whose meaning depends on the policy (scalar text or JSON) (JSON)field8- Value of column 8 of the non-compliance report, whose meaning depends on the policy (scalar text or JSON) (JSON)field9- Value of column 9 of the non-compliance report, whose meaning depends on the policy (scalar text or JSON) (JSON)field10- Value of column 10 of the non-compliance report, whose meaning depends on the policy (scalar text or JSON) (JSON)field11- Value of column 11 of the non-compliance report, whose meaning depends on the policy (scalar text or JSON) (JSON)row_key- Identifier computed by the connector from the whole record (SHA-1), because Magma3 gives this object no id of its ownextra_fields- Fields the API returned that this connector does not map to a column yet, keyed by their original names (JSON)
Bluesky Users
Bluesky Users
Stream
bluesky_users (module Bluesky). Full table; key id.id- Unique identifier of the person user in Magma3login- Login of the user (the user logged in to the computer, or the Active Directory login)name- Name of the userdate_creation- When the user was created in Magma3date_modified- When the user was last modified in Magma3helper_id- Helper (support) identifier of the usercompliance- Whether the user is compliant with the account’s policiesassociate_assets_names- Names of the assets associated with the userperson_administrative_unity_hierarchy- Administrative unit hierarchy of the useractive_directory_user_enabled- Whether the user is enabled in Active Directoryactive_directory_user_description- Description of the user in Active Directoryactive_directory_user_departament- Department of the user in Active Directoryactive_directory_user_position- Job title of the user in Active Directoryactive_directory_user_office- Office of the user in Active Directoryactive_directory_usuario_company- Company of the user in Active Directoryactive_directory_user_email- E-mail of the user in Active Directoryactive_directory_user_phone- Phone of the user in Active Directoryactive_directory_user_city- City of the user in Active Directoryactive_directory_user_state- State of the user in Active Directoryactive_directory_user_distinguished_name- Distinguished name of the user in Active Directoryextra_fields- Fields the API returned that this connector does not map to a column yet, keyed by their original names (JSON)
Bluesky Prints
Bluesky Prints
Stream
bluesky_prints (module Bluesky). Incremental by date_creation; key id.id- Unique identifier of the print job recorddate_creation- When Magma3 received and stored this record, used as the incremental replication keydate_print_sent- When the document was sent to the printerprinter_name- Printer nameprinter_driver_name- Printer driver nameprocessor_name- Print processor namedocument_name- Name of the printed documenttotal_pages- Number of pages printedcolor_printing- Whether the job was printed in colorfront_back- Whether the job was printed on both sidespaper_size- Paper sizefile_size- Size of the print job (bytes)person_user_id- Identifier of the person user (see bluesky_users)person_user_name- Name of the person userperson_user_login- Login of the person userperson_administrative_unity_hierarchy- Administrative unit hierarchy of the person userextra_fields- Fields the API returned that this connector does not map to a column yet, keyed by their original names (JSON)
Bluesky Active Windows
Bluesky Active Windows
Stream
bluesky_active_windows (module Bluesky). Incremental by date_creation; key id.id- Unique identifier of the active-window recorddate_creation- When Magma3 received and stored this record (later than the activity when the computer was offline), used as the incremental replication keytitle- Title of the window in focusfocus_start_date- When the window got the focus on the user’s computer (the real start of the activity)focus_end_date- When the window lost the focus on the user’s computer (the real end of the activity)process_name- Name of the process that owns the windowprocess_category- Magma3’s standard category of the processurl- URL of the page in focus, for browser windowsurl_category- Magma3’s standard category of the sitepid- Process idtype_usage- Productivity classification of the process or site, customizable by the account (e.g. productive, unproductive)computer_name- Name of the computerperson_user_id- Identifier of the person user (see bluesky_users)person_user_name- Name of the person userperson_user_login- Login of the person userperson_administrative_unity_hierarchy- Administrative unit hierarchy of the person userextra_fields- Fields the API returned that this connector does not map to a column yet, keyed by their original names (JSON)
Bluesky Non-compliances
Bluesky Non-compliances
Stream
bluesky_non_compliances (module Bluesky). Incremental by date_creation; key row_key.date_creation- When Magma3 recorded the non-compliance, used as the incremental replication keyorder- Position of the record in the non-compliance analysisperson_user_id- Identifier of the non-compliant person user (see bluesky_users)person_user_name- Name of the non-compliant person userperson_administrative_unity_hierarchy- Administrative unit hierarchy of the person userpolicy_name- Name of the compliance policy that was violatedfield1- Value of column 1 of the non-compliance report, whose meaning depends on the policy (scalar text or JSON) (JSON)field2- Value of column 2 of the non-compliance report, whose meaning depends on the policy (scalar text or JSON) (JSON)field3- Value of column 3 of the non-compliance report, whose meaning depends on the policy (scalar text or JSON) (JSON)field4- Value of column 4 of the non-compliance report, whose meaning depends on the policy (scalar text or JSON) (JSON)field5- Value of column 5 of the non-compliance report, whose meaning depends on the policy (scalar text or JSON) (JSON)field6- Value of column 6 of the non-compliance report, whose meaning depends on the policy (scalar text or JSON) (JSON)field7- Value of column 7 of the non-compliance report, whose meaning depends on the policy (scalar text or JSON) (JSON)field8- Value of column 8 of the non-compliance report, whose meaning depends on the policy (scalar text or JSON) (JSON)field9- Value of column 9 of the non-compliance report, whose meaning depends on the policy (scalar text or JSON) (JSON)field10- Value of column 10 of the non-compliance report, whose meaning depends on the policy (scalar text or JSON) (JSON)field11- Value of column 11 of the non-compliance report, whose meaning depends on the policy (scalar text or JSON) (JSON)row_key- Identifier computed by the connector from the whole record (SHA-1), because Magma3 gives this object no id of its ownextra_fields- Fields the API returned that this connector does not map to a column yet, keyed by their original names (JSON)
Alaska Clipboard Actions
Alaska Clipboard Actions
Stream
alaska_clipboard_actions (module Alaska). Incremental by date_creation; key id.id- Unique identifier of the action recorddate_creation- When Magma3 received and stored this record, used as the incremental replication keycomputer_name- Name of the computer where the action happeneduser_name- Name of the user who performed the actionuser_login- Login of the user who performed the actionfile_content_type- Type of content copied to the clipboardprocess_name- Process that used the clipboardextra_fields- Fields the API returned that this connector does not map to a column yet, keyed by their original names (JSON)
Alaska File Actions
Alaska File Actions
Stream
alaska_file_actions (module Alaska). Incremental by date_creation; key id.id- Unique identifier of the action recorddate_creation- When Magma3 received and stored this record, used as the incremental replication keycomputer_name- Name of the computer where the action happeneduser_name- Name of the user who performed the actionuser_login- Login of the user who performed the actionaction_type- What was done to the file (e.g. created, copied, deleted)file_path- Path of the filefile_content_type- Content type of the fileprocess_name- Process that acted on the fileextra_fields- Fields the API returned that this connector does not map to a column yet, keyed by their original names (JSON)
Alaska Process Actions
Alaska Process Actions
Stream
alaska_process_actions (module Alaska). Incremental by date_creation; key id.id- Unique identifier of the action recorddate_creation- When Magma3 received and stored this record, used as the incremental replication keycomputer_name- Name of the computer where the action happeneduser_name- Name of the user who performed the actionuser_login- Login of the user who performed the actionaction_type- What happened to the process (e.g. started, blocked)file_process_path- Path of the process executableprocess_name- Process nameextra_fields- Fields the API returned that this connector does not map to a column yet, keyed by their original names (JSON)
Alaska Site Actions
Alaska Site Actions
Stream
alaska_site_actions (module Alaska). Incremental by date_creation; key id.id- Unique identifier of the action recorddate_creation- When Magma3 received and stored this record, used as the incremental replication keycomputer_name- Name of the computer where the action happeneduser_name- Name of the user who performed the actionuser_login- Login of the user who performed the actionsite_address- Address of the site accessedsite_category- Magma3’s category of the siteextra_fields- Fields the API returned that this connector does not map to a column yet, keyed by their original names (JSON)
IAM Users
IAM Users
Stream
iam_users (module IAM). Full table; key id.id- Unique identifier of the Console userenabled- Whether the user is enabledlogin- Login of the usernome- Name of the useremail- E-mail of the usercellphone- Mobile phone of the usermfa- Whether multi-factor authentication is on for the userblock_simultaneous_login- Whether simultaneous logins are blocked for the userlanguage- Language of the user’s Consoleprofile_ids- Identifiers of the access profiles of the user (see iam_profiles) (JSON)profile_names- Names of the access profiles of the userextra_fields- Fields the API returned that this connector does not map to a column yet, keyed by their original names (JSON)
IAM Profiles
IAM Profiles
Stream
iam_profiles (module IAM). Full table; key id.id- Unique identifier of the access profilename- Profile namedescription- Profile descriptionpermissions- Permissions of the profile (id, permission name and whether it is granted) (JSON)extra_fields- Fields the API returned that this connector does not map to a column yet, keyed by their original names (JSON)