--- title: Query Operators and Search Fields slug: epmm/v2-api-guide/query-operators-and-search-fields createdAt: 2026-10-06T08:06:42.262Z --- This chapter describes the query operators and search fields that you can use with the query parameter. ## Valid Query Operators The query parameter supports the following operators: | Priority | Operator | Operation | | -------- | ------------------ | --------------------------------------------- | | 1 | = | Equals and case-insensitive string comparison | | 2 | > | Is greater than | | 3 | >= | Is greater than or equal to | | 4 | \< | Is less than | | 5 | \<= | Is less than or equal to | | 6 | "contains" | Case-insensitive substring matching | | 7 | "starts with" | Case-insensitive prefix matching | | 8 | != | Not Equals | | 9 | "does not contain" | Case-insensitive substring exclusion | | 10 | "is empty" | Is empty | | 11 | "is not empty" | Is not empty | ## Valid Search Fields The device search fields include: - those that are common to all - Android-only - iOS-only - Windows-Phone-only - user-related, including LDAP. ### Common Device Search Fields Field name format: "common.\" | Field | Data Type | Sample Data | Description | | ------------------------------------------- | -------------------- | -------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------- | | apns\_capable | boolean | e43f9c41484baf6601b2e80f7390fe195df5 | | | background\_status | string |   | Background Status:0=Enabled, 1=Denied by User, 2=Disabled by Policy, 3=Device not supported, 4=OS not supported, 5=Unknown | | battery\_level | long | 15
99 | | | | | | | | blocked\_reasons | array of strings | 2 | | | blocked | boolean | 2 | | | cellular\_technology | string | GSM | | | client\_id | long | 1073741831 | | | client\_name | string | com.mobileiron | | | client\_build\_date | date | Aug 29 2013 13:02:18 | | | client\_version | string | 5.7.0.1.17R | | | | | | | | comment | string |   | | | noncompliance\_reasons | array of strings | 3 | | | compliant | boolean | 3 | | | creation\_date | date |   | | | current\_country\_code | string | US | | | current\_country\_name | string | United States | | | current\_operator\_name | string | AT\&T | | | current\_phone\_number | string | PDA | | | data\_protection\_enabled | boolean |   | | | data\_protection\_reasons | array of strings |   | | | device\_admin\_enabled | boolean |   | | | device\_is\_compromised | boolean |   | | | device\_space\_ids | array of long values |   | | | device\_space\_name | string |   | | | device\_space\_path | string |   | | | display\_size | string | 1184X768
768x1280 | | | | | | | | eas\_last\_sync\_time | date |   | | | ethernet\_mac | string | 10DDB1F23C06 | | | home\_country\_code | string | FR | | | home\_country\_name | string | France | | | home\_operator\_name | string | France Telecom | | | home\_phone\_number | string | PDA | | | id | long | 5 | | | imei | string |   | | | | | | | | | | | | | imsi | string |   | | | ip\_address | string | 169.254.80.80, fe80\::7091\:fe10:7d67\:ed67
172.16.2.123 | | | | | | | | language | string | English | | | language\_id | long |   | | | lang\_country\_id | long | 5 | | | last\_connected\_at | date | Internal business logic is used to determine which timestamp gets indexed. | | | locale | string | en-US
es-US | | | | | | | | location\_last\_captured\_at | date | 1383608236206 | | | location | geo\_point | 37.396003
-122.056255 | | | | | | | | manufacturer | string | Apple | | | memory\_capacity | long | 832.44M
3220754432 | | | | | | | | memory\_free | long | 326.89M
1802539008 | | | | | | | | mdm\_managed | boolean | t | | | mdm\_tos\_accepted | boolean | true | | | mdm\_to\_accepted\_date | date | 1418672009316 | | | model | string | iPad, 4th gen | | | model\_name | string | Virtual Machine | | | | | | | | os\_version | string | iPhone OS 6.1.3 (10B329)
17
8.0.10327.77
6.1.3 | | | | | | | | | | | | | | | | | | owner | string | f | | | pending\_device\_passcode | string | 123456 | | | pending\_device\_passcode\_expiration\_time | date |   | | | platform\_name | string | iOS 7.1 | | | platform | string | I | | | processor\_architecture | string | ARM
armeabi-v7a
5
Intel64 Family 6 Model 58 Stepping 9 | | | | | | | | | | | | | | | | | | quarantined\_action | long |   | | | quarantined\_reasons | array of strings | 32768 | | | quarantined | boolean | 32768 | | | registration\_date | date | 1390244908000 | | | registration\_imsi | string | 310260000000000 | | | registration\_uuid | string | c36f759717140acf
AB7C0056-C1BE-4096-B630-A54376DEDA4F | This is from the miclient, a randomly generated UUID to identify registration information for this miclient. | ### Android-Only Device Search Fields Field name format: "android.\" | Field | Data Type | Sample Data | Description | | --------------------------------- | --------- | ------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------- | | admin\_activated | boolean | TRUE | | | attestation | string | true | | | afw\_capable | boolean | true | | | brand | string | google | | | c2dmToken | string | APA91bF0OvND3ubyu... | | | codename | string | REL | | | device | string | mako | | | device\_roaming\_flag | string | off | | | gcmToken | boolean | non null=true, null=false | | | incremental | string | 573038 | The firmware version on the device.
| | knox\_version | string |   | | | manufacturer\_os\_version | string |   | | | mdm\_enabled | boolean | TRUE | | | media\_card\_capacity | long | 5803.04M | | | media\_card\_free | long | 5562.67M | | | multi\_mdm | boolean | FALSE | Indicates that there is more than one device administrator on the device. | | os\_build\_number | string | JDQ39 | | | os\_update\_status | string | OK | Indicates whether an OS update is available. Values include: Unavailable, Available, Unsupported.
Status of ROM update for devices that support it. | | platform\_flags | string | 0x3 | A flag that identifies device capabilities. | | samsung\_dm | string |   | | | secure\_apps\_encryption\_enabled | boolean | "Ready" | | | secure\_apps\_encryption\_mode | string |   | | | secure\_apps\_enabled | boolean | "not enabled" | Indicates whether secure apps are enabled on the device. | | security\_detail | string | "0" | A bitmask, 32 bit hex number, representing all detected threads that have compromised the device. | | usb\_debugging | boolean | off | | | zebra\_ota\_capable | boolean | true | Indicates whether the device is Zebra LifeGuard OTA capable. | ### iOS and OS X Device Search Fields Field name format: "ios.\" | Field | Data Type | Sample Data | Description | | ------------------------------- | --------- | --------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Activation Lock Bypass Code | string | JX17H-R0A7Z-E06R-X923-VUF8-81F3 | | | Activation Lock Is Enabled | boolean | false | | | apnsToken | string | e43f9c41484baf6601b2e80f7390fe195df5... | | | BluetoothMAC | string | A88808C93459 | | | BuildVersion | string | 5.1 | | | CarrierSettingsVersion | string | 11.0 | | | Current MCC | string | 310 | | | Current MNC | string | 410 | | | DataRoamingEnabled | boolean | false | | | data\_protection | string | | | | DeviceName | string | Rui's iPad | | | forceEncryptedBackup | boolean | TRUE | | | HardwareEncryptionCaps | long | 3 | Hardware encryption capabilities, bitfield\:bit 0: block-level encryption, bit 1: file-level encryption. | | help\_desk\_enabled | boolean |   | | | iCloud Backup Is Enabled | boolean | true | | | iOSBackgroundStatus | string | 0 | A value the client
returns, indicating its status. Possible values are:
0=Enabled, 1=Denied by User, 2=Disabled by
Policy, 3=Device not supported, 4=OS not
supported, 5=Unknown. | | ip\_address | string | 172.16.2.123 | | | iPhone ICCID | string |   | | | iPhone PRODUCT | string | iPad3,4 | | | iPhone UDID | string | b37aea9c3883e5a0ddfadab5d82d7ea2d4... | | | iPhone VERSION | string | 10B329 | | | iPhone MAC\_ADDRESS\_EN0 | string | 4CECE5D3A198 | | | iPhone UserLongName | string | John Smith | | | iPhone UserShortName | string | John | | | iPhone UserID | string | BF3DDF91-3CB7-40A5-B2F4-2F0E77167113 | | | IsDEPEnrolledDevice | boolean | true | | | IsDeviceLocatorServiceEnabled | boolean | true | Returns MDM data when sending a request for device information on devices running iOS 7 through the most recently released version as supported by Ivanti, Inc. | | IsDoNotDisturbInEffect | boolean | true | | | iTunes Store Account Hash | string | EPMtjvzUBKKvhUJA9VOyvrQXkJI= | | | iTunesStoreAccountIsActive | boolean | false | Indicates whether the device user is logged into an active Apple App Store account on devices running iOS 7 and OS X 10.9 through the most recently released versions as supported by Ivanti, Inc. | | it\_policy\_result | long | 1 | | | Last iCloud Backup Date | string | 2014-07-25 11:58:38 PM | | | ModemFirmwareVersion | string | 04.11.08 | | | ProductName | string | iPad3,4 | | | PasscodePresent | boolean | FALSE | Indicates whether an MDM passcode is present (TRUE or FALSE). | | PasscodeIsCompliantWithProfiles | boolean | TRUE | Indicates whether the passcode of the MDM data user is compliant with the passcode profile (TRUE or FALSE). | | PasscodeIsCompliant | boolean | TRUE | | | Personal Hotspot Enabled | boolean | false | | | security\_reason\_code | string | 0x40000000 | | | Supervised | boolean | FALSE | | | signal\_strength | long | 31 | | | SIM MCC | string | 310 | | | SIM MNC | string | 410 | | | Subscriber Carrier Network | string | AT\&T | | | Voice Roaming Enabled | boolean | N/A
false
true | | | | | | | | | | | | | vpn\_ip\_address | string |   | | | Wakeup Status | integer | 0 | | ### Windows Phone and Surface Device Search Fields Field name format: "windows\_phone.\" | Field | Data Type | Sample Data | Description | | -------------------------------- | --------- | -------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | dm\_client\_version | double | 1.3 | | | network\_adapter | string | Hyper-V Virtual Ethernet Adapter #2 | | | processor\_type | string | Intel(R) Ivanti EPMM(TM) i5-3570 CPU @ 3.40GHz | | | wns\_channel\_url | string | https\://bn1.notify.windows.com/?token=AgYAAAC1r8nFA5Uhc | | | wp\_cert\_renew\_timestamp | date | 0 | Optional. The time in OMA DM (Open Mobile Alliance Device Management) standard time format. This node and the SignedCertRenewTimeStamp node are designed to reduce the risk of the certificate being used by another phone. The phone records the time that the new certificate was created. Supported operation is Get. | | wp\_ent\_dm\_id | long | 0 | Optional. Character string that contains the device ID. This node and the nodes CertRenewTimeStamp and SignedCertRenewTimeStamp can be used by the mobile device management server to verify client identity, so as to update the registration record after the phone certificate is renewed. The phone signs the EntDMID with the old client certificate during the certificate renewal process, and saves the signature locally. Supported operation is Get. | | wp\_exchange\_id | string | 37D9EC65D7F9CC35AF5B8B944256361A | | | wp\_firmware\_version | string | 3045.0000.1328.2046 | | | wp\_hardware\_version | string | 1.0.0.0 | | | wp\_local\_time | date | 2013-10-22T20:08:07.0000258-04:00 | | | wp\_processor\_type | long | 0 | | | wp\_signed\_ent\_dm\_id | long | 0 | | | wp\_management\_service\_address | string |   | | | wp\_mpns\_notification\_uri | string |   | | | wp\_os\_platform | string |   | | | wp\_radio\_swv | string |   | | | wp\_publisher\_device\_id | string |   | | | wp\_ent\_device\_name | string |   | | ### User-Related Device Search Fields The set of user-related device search fields include: - local user search fields - LDAP search fields ### Local User Device Search Fields Field name format: "user.\" | Field | Data Type | Sample Data | | -------------- | --------- | ---------------------- | | email\_address | string | bsmith\@mobileiron.com | ### LDAP-User Device Search Fields LDAP-related search fields include: - basic LDAP-related device search fields - groups Basic LDAP-User Device Search Fields Field name format: "user.ldap.\" | Field | Data Type | | --------- | --------- | | attr\_dn | string | | dn | string | | locale | string | | principal | string | | upn | string | LDAP User-Attributes Device Search Fields Field name format: "user.ldap.user\_attributes.\" | Field | Data Type | | ------------------------------------------------- | ---------------- | | custom1 | string | | custom2 | string | | custom3 | string | | custom4 | string | |   | string | |   | string | |   | string | |   | string | | \ | array of strings | ###  LDAP-Group Device Search Fields Field name format: "user.ldap.groups.\" | Field | Data Type | | ----- | --------- | | dn | string | | name | string | ### Value Enumerations ### Values for the "platform" Device Search Field | Value | | ------------- | | Android | | iOS | | OS X | | Windows | | Windows Phone | ### Values for the "platform\_name" Device Search Field | Value | | ----------------- | | Android | | Android 1.6 | | Android 2.0 | | Android 2.0.1 | | Android 2.1 | | Android 2.2 | | Android 2.3 | | Android 3.0 | | Android 3.1 | | Android 4.0 | | Android 4.0.1 | | Android 4.0.2 | | Android 4.0.4 | | Android 4.1 | | Android 4.2 | | Android 4.3 | | Android 4.4 | | AppleTV | | AppleTV 7.0 | | BlackBerry | | iOS | | iOS 4.0 | | iOS 4.1 | | iOS 4.2 | | iOS 4.3 | | iOS 5.0 | | iOS 5.1 | | iOS 6.0 | | iOS 6.1 | | iOS 7.0 | | iOS 7.1 | | OS X | | OS X 10.7 | | OS X 10.8 | | OS X 10.9 | | Web App Platform | | Windows | | Windows 10 | | Windows 8.1 | | Windows Phone | | Windows Phone 8 | | Windows Phone 8.1 | ### Values for the "status" Device Search Field | Enum Name | Meaning | | --------------------- | ------------------- | | ACTIVE | Active | | BLOCKED | Blocked | | IENROLL\_VERIFIED | Enrollment verified | | IENROLL\_INPROGRESS | Enrolling | | IENROLL\_COMPLETE | Enrolled | | INFECTED | Infected | | LOST | Lost | | RETIRED | Retired | | VERIFIED | Verified | | VERIFICATION\_PENDING | Pending | | EXPIRED | Expired | | WIPED | Wiped | | WIPE\_PENDING | Wipe pending | | UNKNOWN | Unknown status | ### Values for the "owner" Device Search Field | Name | Meaning | | -------- | -------------------------------- | | COMPANY | Company-owned device | | EMPLOYEE | Employee-owned (personal) device | ### Array Value Enumerations ### Values for the "blocked\_reasons", "noncompliance\_reasons", and "quarantined\_reasons" Device Search Fields Each of the fields that use these values have an associated field to determine whether any reasons were set or not. For example, if a device is blocked, then the "blocked\_reasons" field has a list of reasons, and the "blocked" field is 'true'. | Enum Name | Meaning | Hexadecimal Value | | ------------------------ | -------------------------------------------------- | ----------------- | | ALLOWED\_APP\_CONTROL | Allowed app control policy is out of compliance | 0x004000 | | APP\_CONTROL | App control policy is out of compliance | 0x000040 | | ATTESTATION\_FAILED | Attestation failed. | 0x010000 | | AUTO\_BLOCK | Device is not registered | 0x000100 | | COMPROMISED | Device state is compromised | 0x000001 | | DATA\_PROTECTION | Data Protection is not enabled | 0x000008 | | DEVICE\_ADMIN\_DEACTIVE | Device administrator is deactivated | 0x000800 | | DEVICE\_OUT\_OF\_CONTACT | Phone is out of contact | 0x000020 | | DISALLOWED\_APP\_CONTROL | Disallowed app control policy is out of compliance | 0x001000 | | EXCHANGE | Exchange-reported | 0x000400 | | HW\_VERSION | Hardware revision is not allowed | 0x000004 | | LOGGED\_OUT | User logged out | 0x008000 | | MANUAL | Device is manually blocked | 0x000200 | | OS\_VERSION | OS version is less than the supported OS version | 0x000002 | | PER\_MAILBOX\_LIMIT | Device exceeds per mailbox limit | 0x000080 | | POLICY\_OUT\_OF\_DATE | Policy is out of date | 0x000010 | | REQUIRED\_APP\_CONTROL | Required app control policy is out of compliance | 0x002000 | | UNKNOWN | Unknown reason | 0x400000 |