Understanding Date Parameters in API Responses

CSAM provides several key date fields that help you understand when an asset was created, updated, and last observed by sensors. Because data in CSAM is aggregated from multiple sources, such as agents, scanners, and third-party integrations, each date serves a specific purpose.

Date Parameters

The table below describes each date field returned in CSAM API responses, along with the equivalent token you can use to search for the same data in the CSAM UI.

Field Name Description Equivalent UI Tokens
createdDate The createDate is the date when the asset was first created in the CSAM inventory. asset.createdDate:
lastModifiedDate The LastModifiedDate is updated for both platform- and non-platform-related events, indicating that it changes whenever any event associated with that asset is processed, rather than just for scan events. This includes activities such as connector synchronizations, cloud view metadata refreshes, reconciliations, module activations, tag assignments/removals, purge events, and others. asset.lastUpdatedDate:
sensorLastUpdatedDate The sensorLastUpdatedDate is refreshed through endpoint-driven updates from all sources. This date consolidates updates from each source and indicates the most recent update. asset.lastInventoryDate: