Nexthink
  • 24 Apr 2022
  • 3 Minutes to read
  • Dark
    Light
  • PDF

Nexthink

  • Dark
    Light
  • PDF

Nexthink is an IT solution that provides insights into activity across devices, operating systems, and workplace locations to improve IT experiences for employees.

Types of Assets Fetched

This adapter fetches the following types of assets:

  • Devices
  • Users

Parameters

  1. Host Name or IP Address (required) -
    • For an on-premises instance:
      Specify the hostname or IP address of the on-premises Nexthink server.

    • For a cloud-based instance:
      You need to query the Nexthink Cloud engine to obtain the host name.

      To query the Nexthink Cloud engine:

      • Use a Web API request with the format:
https://<customer>-engine-X.<region>.nexthink.cloud/2/query?platform=windows&platform=mac_os&query=(select%20(device_uid%20name)%20(from device))&format=csv

The Engine returns the list of unique identifiers and names of all Windows and Mac OS devices in CSV format.
For more information about setting the names of the engines, see Setting the Names of the Engines.

  1. Port (required, default: 1671) - The port in which Axonius is able to communicate.
  2. User Name and Password (required) - The credentials for a user account that has the Required Permissions to fetch assets.
  3. Limit Fetched Data to Last x Days (required, default: 3) - Specify how many days Axonius should fetch data from the connection of this adapter.
  4. Verify SSL (required, default: false) - Select to verify the SSL certificate offered by the value supplied in Host Name or IP Address. For more details, see SSL Trust & CA Settings.
  5. HTTPS Proxy (optional, default: empty) - A proxy to use when connecting to the value supplied in Host Name or IP Address.
    • If supplied, Axonius will utilize the proxy when connecting to the value supplied in Host Name or IP Address.
    • If not supplied, Axonius will connect directly to the value supplied in Host Name or IP Address.
  6. For details on the common adapter connection parameters and buttons, see Adding a New Adapter Connection.

Nexthink


Advanced Settings

Note:

Advanced settings can either apply for all connections for this adapter, or you can set different advanced settings and/or different scheduling for a specific connection, refer to ​Advanced Configuration for Adapters

  1. Fetch local users (optional, default: true) - Clear the option to exclude members of local user groups from a fetch.
  2. Fetch domain users (optional, default: true) - Clear the option to exclude members of domain user groups from a fetch.
  3. Fetch system users (optional, default: true) - Clear the option to exclude members of system user groups from a fetch.
  4. Fetch unknown users (optional, default: true) - Clear the option to exclude unknown users from a fetch.
  5. Fetch installed software for devices (optional, default: false) - Select whether to include installed software in the fetch.

Note:

To learn more about Adapter Configuration tab advanced settings, see Adapter Advanced Settings.


APIs

Axonius uses the Nexthink Web API V2.

Required Permissions

The value supplied in User Name must have read access to devices.

Any account with Data Privacy set to none (full access) and the option Finder access enabled can make use of the Web API. Otherwise, the Web API will reject the credentials of the account. Moreover, only those users with the right to edit categories can perform updates through NXQL queries.

User credentials are verified with basic HTTP authentication. For a given user, the visibility and info levels are identical to those defined in their profile in the Portal.

Note:

Note that any change that you make in the Portal to an account is not immediately propagated to the Engine. The synchronization between Engine and Portal can take up to five minutes.

In practice, that means that you can have some temporary inconsistencies regarding the permissions of the accounts in Nexthink. For instance, if you remove Finder access from an account by changing its profile to prevent it from accessing the Web API, that account might still be able to query an Engine via the Web API for a few minutes before synchronization takes place and its credentials are invalidated.

Version Matrix

This adapter has only been tested with the versions marked as supported, but may work with other versions. Please contact Axonius Support if you have a version that is not listed and it is not functioning as expected.

Version Supported Notes
Nexthink V6.0 and higher Yes




What's Next
First name must have atleast 2 characters. Numbers and special characters are not allowed.
Last name must have atleast 1 characters. Numbers and special characters are not allowed.
Enter a valid email
Enter a valid password
Your profile has been successfully updated.