Identify a device by MAC, IP, or hostname
find_deviceLocate a device by MAC, IP, or hostname fragment. Merges wireless client, DHCP lease, and ARP data into one record, giving one answer instead of three partial ones.
Instructions
Identify a device on the network by MAC, IP, or hostname fragment.
Searches the wireless client list, the DHCP lease table, and the ARP table together, then merges everything known about each matching device into one record. A device seen in several places produces one result rather than three partial ones.
This is the tool for questions like "what is 198.51.100.47", "is that laptop on the network", or "which SSID is this MAC on".
A MAC query matches whatever punctuation the appliance used, so
20-47-47-7d-db-7b, 2047.477d.db7b, and 20:47:47:7d:db:7b all find
the same device. An IP query is never treated as a MAC.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| vdom | No | Virtual domain to search. Defaults to the one configured for this target. The `vdom` field in the response names the one actually searched, and a device in another vdom will not be found from here. | |
| query | Yes | A MAC address, an IP address, or part of a hostname. Matching is case-insensitive and substring-based, so a partial MAC or a bare hostname prefix works. Partial MACs must keep their separators to be recognized as MACs. | |
| target | No | Which FortiGate to query. Optional when only one is configured. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||