Our applications replicate the full data from the source. Some source systems have a State attribute to keep track of the health or lifecycle of the asset. In example:
Source | Object Type | Attribute | Possible Values |
|---|---|---|---|
Azure AD | Users | Account Enabled | True / False |
Intune | Managed Devices | Device Registration State | notRegistered, registered, revoked, keyConflict, approvalPending, certificateReset, notRegisteredPendingEnrollment, unknown |
Datadog | Hosts | Is muted | True / False |
On the other hand, if a resource is deleted from the source, then there is no information coming from the source for that record. We recommend using the features of Assets for this purpose.
\uD83D\uDCD8 Instructions
Go to Object Schema Configuration.
Select the “Statuses” tab.
Click “Create a status”
Call it “Deleted” and select the red category (inactive).
 |
|---|
Go back to Object Schema.
Select the object type you would like to modify.
Select the Attributes tab.
Add a new attribute for “Source State” with a type of Status.
 |
|---|
Go to Object Schema Configuration again.
Select the import tab.
Select “Edit Mapping” for the import configuration.
Select edit object type mapping for the Object Type that you would like to update.
 |
|---|
Change the setting for “Missing objects” to “Update”. Select the “Source State” attribute. And write “Deleted” for the new value. Set the Threshold Number to 3. This means, in case a record is not found 3 times, then it will be marked as “Deleted”.
 |
|---|
From now on you can follow the imports and check if the records are being marked as Deleted.
Example AQL:
"Source State" = "Deleted"
\uD83D\uDCCB Related articles