Search Tokens for External Sites
You can use search tokens to search external sites on the External Sites tab.
externalSite.targetexternalSite.target
Use a text value ##### to search an external site using an FQDN (Fully Qualified Domain Name) or an IP address. For exact search, enclose the token value in backticks `<value>`
Examples
Show any findings related to an external site using an IP address
target:64.41.200.100
Show any findings that contain parts of an external site using its FQDN
externalSite.target: "www.ssllabs.com"
Show the findings that match the exact external site using its FQDN
externalSite.target: `www.qwiki.com`
Show any findings that match the exact external site using an IP address
externalSite.target:`64.41.200.100`
externalSite.lastScanStatusexternalSite.lastScanStatus
Search the external sites using their last scan status. Select the token values from Finished, Canceled, Waiting, Queued, Running, or Error.
Note: To search the external sites that are never scanned, specify the value as null.
Examples
Show external sites that have scan status as Finished
externalSite.lastScanStatus: Finished
Show external sites that are never scanned
externalSite.lastScanStatus is null
externalSite.lastScanDateexternalSite.lastScanDate
Use a date range or specific date to search external sites using the last scan date in YYYY-MM-DD format.
Examples
Show external sites that were last scanned on 2022-12-05.
externalSite.lastScanDate: '2022-12-05'
Show external sites that were last scanned between specific dates.
externalSite.lastScanDate: [2018-06-15 .. 2018-06-30]
externalSite.resolvedIpexternalSite.resolvedIp
Use a text value ##### to search external sites using IPs on which they are resolved.
Example
Show external sites resolved on 64.41.200.100.
externalSite.resolvedIp: "64.41.200.100"
Supported Boolean Operators
The Qualys Query Language (QQL) supports the following logical or Boolean query operators. Use these operators in your queries to narrow down or broaden your search.
Narrow down the search by using the and operator in the Boolean query. The result contains all the token values that are provided in the query.
Example
Show the external site with the given IP address and last scan status as Waiting
externalSite.resolvedIp:"64.41.200.100" and externalSite.lastScanStatus:Waiting
Narrow down the search by using the not operator in the Boolean query. The result contains all the other values except the one specified after not in the query.
Example
Exclude the external sites with the last scan status as Error
Not externalSite.lastScanStatus: Error
Broaden the search by using the or operator in the Boolean query. The result contains any of the token values that are provided in the query.
Example
Show the external sites having last scan status as Error or Canceled
externalSite.lastScanStatus:Error or externalSite.lastScanStatus:Canceled