- 30 Jan 2024
- 3 Minutes to read
- Updated on 30 Jan 2024
- 3 Minutes to read
Nexthink is an IT solution that provides insights into activity across devices, operating systems, and workplace locations to improve IT experiences for employees.
Types of Assets Fetched
This adapter fetches the following types of assets:
- Host Name or IP Address (required) -
For an on-premises instance:
Specify the hostname or IP address of the on-premises Nexthink server.
For a cloud-based instance:
You need to query the Nexthink Cloud engine to obtain the host name.
To query the Nexthink Cloud engine:
- Use a Web API request with the format:
The Engine returns the list of unique identifiers and names of all Windows and Mac OS devices in CSV format.
For more information about setting the names of the engines, see Setting the Names of the Engines.
- Port (required, default: 1671) - The port in which Axonius is able to communicate.
- User Name and Password (required) - The credentials for a user account that has the Required Permissions to fetch assets.
- Limit Fetched Data to Last x Days (required, default: 3) - Specify how many days Axonius should fetch data from the connection of this adapter.
- Verify SSL (required, default: false) - Select to verify the SSL certificate offered by the value supplied in Host Name or IP Address. For more details, see SSL Trust & CA Settings.
- HTTPS Proxy (optional, default: empty) - A proxy to use when connecting to the value supplied in Host Name or IP Address.
- If supplied, Axonius will utilize the proxy when connecting to the value supplied in Host Name or IP Address.
- If not supplied, Axonius will connect directly to the value supplied in Host Name or IP Address.
For details on the common adapter connection parameters and buttons, see Adding a New Adapter Connection.
Advanced settings can either apply for all connections for this adapter, or you can set different advanced settings and/or different scheduling for a specific connection, refer to Advanced Configuration for Adapters
Fetch local users (optional, default: true) - Clear the option to exclude members of local user groups from a fetch.
Fetch domain users (optional, default: true) - Clear the option to exclude members of domain user groups from a fetch.
Fetch system users (optional, default: true) - Clear the option to exclude members of system user groups from a fetch.
Fetch unknown users (optional, default: true) - Clear the option to exclude unknown users from a fetch.
Fetch installed software for devices (optional, default: false) - Select whether to include installed software in the fetch.
Drop DWM/UMFD accounts - Select this option to ignore DWM/UMFD accounts
Fetch highest local privilege reached - Select this option to fetch the field called ‘Highest Local Privilege Reached’. This information can help determine whether a user is an admin user.
To learn more about Adapter Configuration tab advanced settings, see Adapter Advanced Settings.
Axonius uses the Nexthink Web API V2.
The value supplied in User Name must have read access to devices.
Any account with Data Privacy set to none (full access) and the option Finder access enabled can make use of the Web API. Otherwise, the Web API will reject the credentials of the account. Moreover, only those users with the right to edit categories can perform updates through NXQL queries.
User credentials are verified with basic HTTP authentication. For a given user, the visibility and info levels are identical to those defined in their profile in the Portal.
The access account requires admin rights to access the installed software data from Nexthink.
Note that any change that you make in the Portal to an account is not immediately propagated to the Engine. The synchronization between Engine and Portal can take up to five minutes.
In practice, that means that you can have some temporary inconsistencies regarding the permissions of the accounts in Nexthink. For instance, if you remove Finder access from an account by changing its profile to prevent it from accessing the Web API, that account might still be able to query an Engine via the Web API for a few minutes before synchronization takes place and its credentials are invalidated.
This adapter has only been tested with the versions marked as supported, but may work with other versions. Please contact Axonius Support if you have a version that is not listed and it is not functioning as expected.
|Nexthink V6.0 and higher