Data Extracts

A Data Extract allows you to access data such as historical patching activity and audit logs in a download file. This describes how you can view, generate, and download data extracts from the Automox console.

Viewing Data Extracts

You can view previously created data extracts from the Data Extracts page.

  1. From the Reports page, click View for Data Extracts.

  2. If any data extracts are available, you can click to download them. If no extracts are available, you can generate a new extract.

  3. The Data Extracts table consists of the following columns:

Column nameDescription
Data RequestedExact time and date when the extract was generated.
Date RangeStart and end dates of the requested extract.
Extract ExpirationTime and date the extract will no longer be available for download. After this date, the Status shows as expired. Note: Extracts are available for 24 hours.
StatusThis can show the following statuses:
  • Queued
  • Running
  • Complete
  • Failed
  • Canceled
  • Expired

Note: The table can be sorted by Date Requested or Status.

Note: If you see a failed state, contact Automox Support. Provide the Data Extract ID so that we can help diagnose what went wrong.

Generating Data Extracts

You can generate an extract that provides details about patch activity or API activity for a defined time period.

  1. From the Reports page, click View for Data Extracts.

  2. Click Generate New.

  3. Select the extract type you want to generate: Patch History or API Activity.

  4. Enter the start date and end date for the extract you want to generate. You can generate an extract that is a maximum of 90 days. This represents the 90-day time frame leading up to the day before the extract is issued. For example, on 2020-12-01 the default time-frame start should be 2020-09-02 and it should end with 2020-11-30.

  5. Click Generate.
    Note: This process can take several minutes.

  6. You can view the process and status of the new extract on the Data Extracts page.

Downloading Data Extracts

You can download and save data extracts that you have created. 

Note: Extracts are only available to be downloaded for 24 hours after being created.

  1. From the Reports page, click View for Data Extracts.

  2. On the Data Extracts page, find the extract you want to view and click Download.

  3. The extract (CSV) includes the following information for the time frame requested, depending on which type of extract:

What is in the download for each extract type?

Patch History

Data TypeExported Column NameMeaning Description
Device informationdevice_nameDevice NameName of device (typically hostname)

device_custom_nameDevice Custom NameName assigned to the device by the customer.

organization_idZone IDThis is the zone ID

device_idDevice IDThis number is the same as the server ID

agent_versionAgent VersionVersion of the Automox agent installed on the device

groupGroupName of the group this device is assigned to

package_idPackage IDIdentifier for the specific package

device_ignoredDevice IgnoredThis indicates if a software package is ignored for a device (from the Device Details)

group_ignoredGroup IgnoredThis indicates if a software package is ignored globally from the Software page
Patch Informationpatch_namePatch NameName of the software update (patch)

patch_versionPatch VersionVersion number of the software update

patch_knowledge_basePatch Knowledge BaseKnowledge base identifier associated with the update
Mutual Device/Patch Informationoperating_system_familyOperating System FamilyOS family (Windows, Mac, or Linux)

operating_system_nameOperating System NameOS name of the installed system

operating_system_versionOperating System VersionInstalled OS version

managed_patchManaged PatchThis shows if the update is managed by Automox
Event Dataevent_timestampEvent TimestampTimestamp of the event

patch_actionEvent Type (patch action)"Patch available" or "Patch installed"

patch_available_timestampPatch Available TimestampTimestamp that informs when patch became available for installation

patch_installed_timestampPatch Installed TimestampTimestamp that informs when patch was installed on the device

exposure_time_hoursExposure TimeAmount of time the device was not updated with the available patch
Vulnerability Datapatch_severityPatch SeveritySeverity (if any) of vulnerability associated with the patch (for example: critical, high, medium, low)

cvesCVEsCVEs (if any) associated with the patch

API Activity

The CSV download includes the following exported data.

Column NameDescription
UUIDUniversally unique identifier for the log entry
created_at (Creation Time)Time and date that the extract was created
created_by (Created By)Automox service that handled the request
environmentAutomox environment the activity was logged in
organization_idID of the zone
user_idID of the user who made the request
identity_idThe ID of the identity used to make the request. For users, this is identical to the User ID field. For API keys, this is the ID of the API key used to make the request.
identity_typeThe type of identity used to make the request (api-key, user)
request_idUnique identifier for the request
methodHTTP method
pathURL path (for example: /api/servers)
content_typeContent-type header, if present
remote_ipIP of the remote client who made the request
server_ipIP of the server that handled the request
refererHTTP referer, if present
queryHTTP query string
request_bodyHTTP request body
response_codeHTTP response code
filesAn array of the file ref objects that were uploaded in the request. Each file ref has the following fields:
  • Name: The original name of the uploaded file
  • Byte_size: file size in bytes
  • Hash: sha256 hash of file contents

 If you have questions about this, please contact us at

Related Topics: