Reflexion will be End-of-life on March 31,2023. See Sophos Reflexion EoL FAQs to learn more.
The below query will use the arp_cache table from the devices specified, take the MAC Address information from the results and send that via CURL to an API (https://macvendors.com/api) to pull in vendor information for the MAC addresses as another column
------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
select
json_extract(curl.result,'$.result.company') device,
*
from arp_cache left join curl on url = 'http:' || '/' || '/' || 'macvendors.co/api/' || arp_cache.mac where mac not in ('FF:FF:FF:FF:FF:FF') AND permanent = '0'