Search Scripts
script.approvedBy.user.name script.approvedBy.user.name
Use a text value ##### in quotes to search results with certain username who approved the Script.
Example:
Show results with this username
script.approvedBy.user.name:"adminuser"
script.categoryscript.category
Use a text value ##### to find all results that have the specified category (DATA BACKUP, DATA COLLECTION, GENERAL AUTOMATION, REMEDIATION, SYSTEM ADMINISTRATION, SYSTEM MAINTENANCE).
Examples
Show results with this category
script.category:GENERAL AUTOMATION
script.createdBy.user.namescript.createdBy.user.name
Use a text value ##### in quotes to search results with certain username who created the script.
Example
Show results with this username
script.createdBy.user.name:"adminuser"
script.descriptionscript.description
Use a text value ##### in quotes to find results with a certain script description.
Example
Show all results that have script description
script.description:"test_file"
script.isGitHubAutoSyncEnabledscript.isGitHubAutoSyncEnabled
Use a text value ##### in quotes to fetch scripts that are configured to be automatically synced with GitHub (true, false).
Example:
Show results with scripts are automatically synced with GitHub
script.isGitHubAutoSyncEnabled:"True"
script.githubSyncStatusscript.githubSyncStatus
Use a text value ##### to find results with the specified script job status (failed, success).
Example:
Show results with scripts that were not synced with GitHub
script.githubSyncStatus:"failed"
script.hasSystemBehaviorAffectingCommandsscript.hasSystemBehaviorAffectingCommands
Use a text value ##### in quotes to fetch scripts that contain commands that may impact the system behavior and performance of your assets (true, false).
Example:
Show results with system-impacting commands
script.hasSystemBehaviorAffectingCommands:"True"
script.hasParametersscript.hasParameters
Use the token value as true or false to get a list of the parameterized scripts.
Example:
Show the list of the parameterized scripts
script.hasParameters:"true"
Use an integer value ##### to find results with an script ID of interest.
Examples
Show all results with this script ID
script.id:`21`
script.importedScriptFromGitHubscript.importedScriptFromGitHub
Use a text value ##### in quotes to fetch scripts that are imported from GitHub (true, false).
Example:
Show results with scripts that are imported from GitHub
script.importedScriptFromGitHub:"True"
script.importedFromGitHubPublicReposcript.importedFromGitHubPublicRepo
Use a text value ##### in quotes to fetch scripts that are imported from GitHub (true, false).
Example
Show results with scripts that are imported from a GitHub public repository (true, false).
script.importedFromGitHubPublicRepo: "true"
script.importedFromScriptLibraryscript.importedFromScriptLibrary
Use a boolean value true or false to filter scripts imported from the scripts library.
Example
Show results with scripts imported from the scripts library
script.importedFromScriptLibrary: "true"
script.languagescript.language
Use a text value ##### to filter scripts in Library based on the scripting language.
Example
Show findings with this language
script.language: 'Python'
script.moduleCodescript.moduleCode
Use the value to filter scripts based on module code .
Example
Show results with one of these categories:
script.moduleCode: VMDR
Use the token value as Parameterized or Standard to view the list of scripts based on the mode.
Example
Show all results that contain parts of this script
script.mode: Parameterized
Use quotes or backticks within values to find all results that have the specified word in their script name.
Examples
Show all results that contain parts of this script name
script.name:"O365unix"
Show all results that match exact value "unixrun"
script.name:`unixrun`
script.platformscript.platform
Use a text value ##### to find results with certain platform (WINDOWS, LINUX).
Examples
Show all results with this platform
script.platform:`LINUX`
Use the value to filter scripts based on qid.
Example
Show results with the following QID:
finding.qid 51001511
Use the value to filter the Scripts based on qid title.
Example
Show results with one of these categories
finding.title: `CAR QID`
finding.subTypefinding.subType
Use a text value ##### to filter VMDR scripts in Library based on the qidSubType.
Example
Show findings with this qidSubTyoe
finding.subType: 'remediation'
Use the value to to filter the Scripts based on qid status.
Example
Show results with one of these categories
finding.status: `Active`
finding.technology.namefinding.technology.name
Use the value to filter the Scripts based on qid technology.
Example
Show results with one of these categories
finding.technology.name: `PostgreSQL`
finding.severityfinding.severity
Use the value to to filter the Scripts based on qid severity.
Example
Show results with one of these categories
finding.severity: `3`
finding.detectionLogicfinding.detectionLogic
Use this text #### to filter VMDR scripts based on the QID detection logic.
Example
Show findings with QID detection logic.
finding.detectionLogic: 'UserScript'
Use this token to filter custom QID scripts based on the CVE ID.
Example
Show findings with CVE ID.
finding.detectionLogic: 'CVE-2020-23'
script.severityscript.severity
Use an integer value ##### to find results with this severity (1-5). Select from values in the drop-down menu.
Example
Show findings with severity 5
script.severity:5
Use a text value ##### to find all results with status (APPROVED, DEPRECATED, PENDING_REVIEW, PENDING_TEST, TESTED).
Examples
Show results with this status
script.status:`APPROVED`
Use a text value ##### to filter custom scripts based on the subtype.
Examples
Show findings with this subtype
script.subType: Response
Show findings with this subtype
script.subType: Detection
script.thresholdscript.threshold
Use a integer value ##### to find results job with certain threshold value.
Examples
Find results with this threshold
script.threshold: 3
Use a text value ##### to find all results that have the specified type (CustomScript).
Examples
Show results with this type
script.type:CustomScipt
Use This text #### to filter custom QID scripts based on the Qualys Detection Score.
Example
Show findings with Qualys Detection Score.
finding.qds: '54'
Use the Confirmed/Potential/Information Gathered as values to filter QIDs with respective vulnerability type.
Example
Show results with vulnerability type.
finding.type: `Confirmed`
scriptLibraryIdscriptLibraryId
Use the script Library ID to fetch the script associated with OT from Library.
Example
Show findings with the script associated to OT
scriptLibraryId: ' 763456'
finding.isScanEnabledfinding.isScanEnabled
Use the value true | false to filter VM Scan-enabled scripts.
Example
Show findings VM Scan-enabled scripts
finding.isScanEnabled: true
Use this token to search the control ID remediation scripts using the control script name.
Example
Show scripts with the following control script name.
control.name: "Control for Policy"
Use this token to search control ID remediation scripts using the control ID.
Example
Show scripts with the following control ID.
control.id: `30342`
control.benchmarkTypecontrol.benchmarkType
Use this token to search control ID remediation scripts using the control benchmark type.
Example
Show scripts with the following benchmark type.
control.benchmarkType: "CIS"
control.technology.namecontrol.technology.name
Use this token to search control ID remediation scripts using the control technology.
Example
Show script
control.technology.name: "Ubuntu Linux"
Use a boolean query to express your query using AND logic.
Example
Show results created by John
user: `JOHN` and activity: `CREATE`
Use a boolean query to express your query using NOT logic.
Example
Show activity logs that are not rejected
user: `admin` not activity: `REJECT`
Use a boolean query to express your query using OR logic.
Example
Show results for one of the following
mode:Standard or type:Custom QID
Software Package Tokens
software.package.idsoftware.package.id
Use a numeric value to search for software packages with a specific software package ID.
Example:
Show results for software package ID 12345.
software.package.id:`12345`
software.package.namesoftware.package.name
Use a string value to filter results by software package name.
Example:
Show results with package name Chrome Install.
software.package.name:'chrome install'
software.package.actionsoftware.package.action
Use a string value to filter results by package action. Supported values: Install, Uninstall.
Example:
Show results for installation packages.
software.package.action:Install
software.package.methodsoftware.package.method
Use a string value to filter results by installation method. Supported values:
- Windows:
MSI,EXE - Linux:
RPM,DEB,Package Manager
Example:
Show results for MSI packages.
software.package.method:MSI
software.package.statussoftware.package.status
Use a string value to filter results by package status. Supported values:
- PENDING_REVIEW
- PENDING_UPDATE
- PENDING_TEST
- APPROVED
- DEPRECATED
- REJECTED
Example:
Show results for approved packages.
software.package.status:APPROVED
software.package.createdBy.usernamesoftware.package.createdBy.username
Use a string value to filter results by the username of the package creator.
Example:
Show results for packages created by John Doe.
software.package.createdBy.username:John Doe
software.package.approvedBy.usernamesoftware.package.approvedBy.username
Use a string value in quotes to filter results by the username of the approver.
Example:
Show results for packages approved by John Doe.
software.package.approvedBy.username:John Doe
software.package.descriptionsoftware.package.description
Use a string value to filter results by package description.
Example:
Show results with description containing browser update.
software.package.description:"browser update"