Nexthink

Nexthink is an IT solution that provides insights into activity across devices, operating systems, and workplace locations to improve IT experiences for employees.

Types of Assets Fetched

This adapter fetches the following types of assets:

• Devices
• Users
  
  

Parameters

1. Host Name or IP Address (required) -

   • For an on-premises instance:
     Specify the hostname or IP address of the on-premises Nexthink server.

   • For a cloud-based instance:
     You need to query the Nexthink Cloud engine to obtain the host name.

     To query the Nexthink Cloud engine:

     • Use a Web API request with the format:

https://<customer>-engine-X.<region>.nexthink.cloud/2/query?platform=windows&platform=mac_os&query=(select%20(device_uid%20name)%20(from device))&format=csv

The Engine returns the list of unique identifiers and names of all Windows and Mac OS devices in CSV format.
For more information about setting the names of the engines, see Setting the Names of the Engines.

2. Port (required, default: 1671) - The port in which Axonius is able to communicate.
3. User Name and Password (required) - The credentials for a user account that has the Required Permissions to fetch assets.
4. Limit Fetched Data to Last x Days (required, default: 3) - Specify how many days Axonius should fetch data from the connection of this adapter.
5. Verify SSL (required, default: false) - Select to verify the SSL certificate offered by the value supplied in Host Name or IP Address. For more details, see SSL Trust & CA Settings.
6. HTTPS Proxy (optional, default: empty) - A proxy to use when connecting to the value supplied in Host Name or IP Address.
   • If supplied, Axonius will utilize the proxy when connecting to the value supplied in Host Name or IP Address.
   • If not supplied, Axonius will connect directly to the value supplied in Host Name or IP Address.

For details on the common adapter connection parameters and buttons, see Adding a New Adapter Connection.

Advanced Settings

1. Fetch local users (optional, default: true) - Clear the option to exclude members of local user groups from a fetch.

2. Fetch domain users (optional, default: true) - Clear the option to exclude members of domain user groups from a fetch.

3. Fetch system users (optional, default: true) - Clear the option to exclude members of system user groups from a fetch.

4. Fetch unknown users (optional, default: true) - Clear the option to exclude unknown users from a fetch.

5. Fetch installed software for devices (optional, default: false) - Select whether to include installed software in the fetch.

6. Drop DWM/UMFD accounts - Select this option to ignore DWM/UMFD accounts

7. Fetch highest local privilege reached - Select this option to fetch the field called ‘Highest Local Privilege Reached’. This information can help determine whether a user is an admin user.

APIs

Axonius uses the Nexthink Web API V2.

Required Permissions

• The value supplied in User Name must have read access to devices.

• Any account with Data Privacy set to none (full access) and the option Finder access enabled can make use of the Web API. Otherwise, the Web API will reject the credentials of the account. Moreover, only those users with the right to edit categories can perform updates through NXQL queries.

• User credentials are verified with basic HTTP authentication. For a given user, the visibility and info levels are identical to those defined in their profile in the Portal.

• The access account requires admin rights to access the installed software data from Nexthink.

Version Matrix

This adapter has only been tested with the versions marked as supported, but may work with other versions. Please contact Axonius Support if you have a version that is not listed and it is not functioning as expected.