Search for Insights

Use the search tokens below to search for Insights. Looking for help with writing your query? click here.

cloud.idcloud.id

Use a text value to find insights belonging to a specified cloud ID.

Example

Show insights with this cloud ID.

cloud.id:12345

aws.account.aliasaws.account.alias

Use a text value ##### to show connectors based on the account alias associated with the connector/ARN at the time of creation.

Example

Show connectors with this account alias

aws.account.alias: Example_connector

connector.nameconnector.name

Use a text value to find insights associated with the specified connector name.

Example

Show insights with this connector name

connector.name: "my-connector"

tags.nametags.name

Use values within quotes or backticks to help you find the resources with the specified tag you're looking for.

Example

Show any findings that contain "network" and "blue" in name

tags.name: "network blue"

Show any findings that contain "network" or "blue" in name (another method)

tags.name: "network" OR tags.name: "blue"

Show any findings that match exact value "Cloud Agent"

tags.name: "Cloud Agent"

cloud.resource.namecloud.resource.name

Use a text value to find insights associated with the specified resource name.

Example

Show insights with this resource name

cloud.resource.name:"test"

cloud.resource.idcloud.resource.id

Use a text value to find insights associated with the specified resource id.

Example

Show insights with this resource ID

cloud.resource.id: acl-8e5198f5

cloud.regioncloud.region

Use a text value to find insights associated with the specified region.

Example

Show insights with this region

cloud.region: Singapore

azure.locationazure.location

Use a text value to find insights associated with the specified Azure location.

Example

Show insights with this location

azure.location: Singapore

aws.account.tag.keyaws.account.tag.key

Use values within quotes or backticks to find the list of insights of AWS connectors with the specified tag key.

Examples

Show insights of AWS connectors with the specified tag key.

aws.account.tag.key: "Department"

Show insights of AWS connectors that match the exact specified tag key.

aws.account.tag.key: `S3 Department`

aws.account.tag.valueaws.account.tag.value

Use values within quotes or backticks to find the list insights of AWS connectors with the specified tag value.

Examples

Show insights of AWS connectors with the specified tag value.

aws.account.tag.value: "Finance"

Show insights of AWS connectors that match the exact specified tag value.

aws.account.tag.value: `B1 Finance`

azure.subscription.nameazure.subscription.name

Use a text value ##### to find Azure insights based on the subscription name associated with the insight.

Example

Show insights that apply to this subscription name

azure.subscription.name: Sample Cloud Subscription

azure.resourceGroupNameazure.resourceGroupName

Use a text value ##### to find resources by the resource group name.

Example

Show resources with this group name.

azure.resourceGroupName: my-eastus-rg

cloud.resource.typecloud.resource.type

Select the type of resource you're interested in. Select from names in the drop-down menu.

Example

Show resources of type Instance

cloud.resource.type: Instance

service.typeservice.type

Use a text value to find insights associated with the specified service type.

Example

Show insights with this service type.

service.type:EC2 

asset.truRiskasset.truRisk

Use a text value to find insights associated with the specified risk score.

Example

Show insights with risk score above 700

asset.truRisk > 700

insight.titleinsight.title

Use a text value to find insights associated with their specified titles.

Example

Show insights with the title

insight.title:"Publicly Exposed VM"

cloud.providercloud.provider

Use a text value to find insights based on the specified cloud provider.

Example

Show insights of the cloud provider Azure

cloud.provider: AZURE

control.idcontrol.id

Use a text value to find insights based on the specified CID. Each CID is a unique identifier for a particular Insight.

Example

Show the insight with CID 5017.

control.id: 5017

k8s.cluster.namek8s.cluster.name

Provide a string value to find Kubernetes resources associated with the specified cluster name.

Examples

Find resources in cluster "production-cluster"

k8s.cluster.name: production-cluster

k8s.namespacek8s.namespace

Provide a string value to find Kubernetes resources within the specified namespace.

Examples

Find resources in the "default" namespace

k8s.namespace: default

insight.isAttackPathEnabledinsight.isAttackPathEnabled

Search for insights based on whether attack path analysis is enabled for them. Select from True or False.

Example

Show insights where attack path analysis is enabled

insight.isAttackPathEnabled: True

andand

Use a boolean query to express your query using AND logic.

Example

Show findings with account ID 205767712438 and type Subnet

account.id: 205767712438 and resource.type: Subnet

notnot

Use a boolean query to express your query using NOT logic.

Example

Show findings that are not region Hong Kong

not region: Hong Kong

oror

Use a boolean query to express your query using OR logic.

Example

Show findings with one of these tag values

tag.value: Finance or tag.value: Accounting

image.registry image.registry

Search for container images based on the registry where the image is stored.

Example

Show images from AWS ECR registry

image.registry: ECR