is it possible to run a query everytime an endpoint changes the ip address? is there a sort of this kind of event?

to my knowledge, no, there isn’t a way to trigger queries to run based on system changes

If you are on Windows and could find the relevant Windows event to log when this happens, perhaps you could pick it up in the

windows_events

table?

yes, I am looking in events logs

i thought discovery queries in this point… but it is not suitable for this. Discovery queries might be shaped as dinamically in the future @thor

Honestly not sure, I don’t think that’s on anyone’s roadmaps >.>