Search for OCI Resources

General

tags.nametags.name

Use values within quotes or backticks to help you find the resources with the specified tag you're looking for.

Example

Show any findings that contain "network" and "blue" in name

tags.name: "network blue"

Show any findings that contain "network" or "blue" in name (another method)

tags.name: "network" OR tags.name: "blue"

tag.keytag.key

Use values within quotes or backticks to help you find the resources with the specified tag key you want.

Show findings with one of these tag keys

tag.key: Department

tag.valuetag.value

Use values within quotes or backticks to help you find the resources with the specified tag value you want.

Example

Show findings with the specified tag values

tag.value: Finance

tag.typetag.type

Use values within quotes or backticks to help you find the resources with the specified tag type you want.

Example

Show findings with the specified tag type

tag.type: DEFINED

tag.namespacetag.namespace

Use values within quotes or backticks to help you find the resources with the specified tag namespace you want.

Example

Show findings with the specified tag namespace

tag.namespace: test

namename

Use values within quotes to help you find the resource name you're looking for.

Examples

Show any findings with this name

name: my-resource

Show all the findings that exactly match with this name

name: `my-resource`

regionregion

Select the name of the region you're interested in. Select from names in the drop-down menu.

Example

Find resources in the Singapore region

region: Singapore,Singapore

resource.idresource.id

Use a text value ##### to find resources by the unique ID assigned to the resource.

Example

Show resources with ID acl-8e5198f5

resource.id: acl-8e5198f5

resource.type resource.type

Select the type of resource you're interested in. Select from names in the drop-down menu.

Example

Show resources of type Instance

resource.type: Instance

tenantIdtenantId

Use a text value ##### to search connectors created with specific tenant ID.

Example

Show all assets with the specific tenant ID

tenantId: "ocid1.tenancy.oc1..aaaaaaaax2gwhq3hszjqhte5pgzijgyge6gvlsrqar6kxn7itwhk7keokamq"

updatedupdated

Use a date range or specific date to define when the resource was last updated.

Examples

Show resources updated within certain dates

updated: [2018-01-01 ... 2018-03-01]

Show resources updated starting 2018-10-01, ending 1 month ago

updated: [2018-01-01 ... now-1m]

Show resources updated starting 2 weeks ago, ending 1 second ago

updated: [now-2w ... now-1s]

Show resources updated on specific date

updated: 2018-01-08

createdcreated

Use a date range or specific date to define when the resource was created.

Examples

Show resources created within certain dates

created: [2018-01-01 ... 2018-03-01]

Show resources created starting 2018-10-01, ending 1 month ago

created: [2018-01-01 ... now-1m]

Show resources created starting 2 weeks ago, ending 1 second ago

created: [now-2w ... now-1s]

Show resources created on specific date

created: 2018-01-08

andand

Use a boolean query to express your query using AND logic.

Example

Show findings with account ID 205767712438 and type Subnet

account.id: 205767712438 and resource.type: Subnet

notnot

Use a boolean query to express your query using NOT logic.

Example

Show findings that are not resource type Instance

not resource.type: Instance

oror

Use a boolean query to express your query using OR logic.

Example

Show findings with one of these tag values

tag.value: Finance or tag.value: Accounting

OCI: Bucket

bucket.idbucket.id

Use a text value ##### to find OCI bucket ID of interest.

Example

Show findings with this bucket ID

bucket.id: a3a33997d333416174cb4c27fa89364a2f31b12498ffc

bucket.namebucket.name

Use a text value ##### to find OCI Bucket name of interest.

Example

Show findings with this name

bucket.name: testbucket

bucket.namespacebucket.namespace

Use a text value ##### to find buckets with the associated namespace.

Example

Show buckets with specified associated namespace

bucket.namespace: testBucketNameSpace

bucket.compartmentIdbucket.compartmentId

Use a text value ##### to find Buckets of specified compartmentID.

Example

Show findings with this Compartment ID

bucket.compartmentId: ocid1.tenancy.oc1..xxxxx

bucket.createdBybucket.createdBy

Use a text value ##### to find the Buckets created by the given Tenant ID

Example

Show buckets associated with this Tenant ID

bucket.createdBy: ocid1.saml2idp.oc1..aaaaaaaan2pqeypajxjuxrvvf7ja2zuhoxxxxxxxxxxt7pindm24ixfq6aua/test@qualys.com

bucket.replicationEnabledbucket.replicationEnabled

Use the values true | false to find Buckets with replication enabled.

Example

Show findings with replication enabled.

bucket.replicationEnabled: true

bucket.isReadOnlybucket.isReadOnly

Use the values true | false to find Buckets that are read-only.

Example

Show findings set to read-only

bucket.isReadOnly: true

bucket.versioningbucket.versioning

Use a text value (Enabled, Disabled) to find buckets of specified versioning.

Example

Show findings with versioning as Enabled.

bucket.versioning: Enabled

bucket.autoTieringbucket.autoTiering

Use a text value (Disabled, InfrequentAccess) to find buckets with specified storage tier transition permissions.

Example

Show findings with auto-tiering as Disabled.

bucket.autoTiering: Disabled

bucket.objectEventsEnabledbucket.objectEventsEnabled

Use the values true | false to find buckets that have Events enabled for object state changes.

Example

Show findings with object Events enabled.

bucket.objectEventsEnabled: true

bucket.kmsKeyIdbucket.kmsKeyId

Use a text value ##### to find Buckets of specified KMS Key ID.

Example

Show findings with this KMS Key ID

bucket.kmsKeyId: a3a33997d333416174cb4c27fa89364a2f31b12498ffc

bucket.publicAccessTypebucket.publicAccessType

Select from the dropdown (NoPublicAccessType, ObjectRead, ObjectReadWithoutList) to find buckets with the provided public Access Type.

Examples

Find assets with the public access type ObjectRead

bucket.publicAccessType: ObjectRead

Find assets with the public access type ObjectReadWithoutList

bucket.publicAccessType: ObjectReadWithoutList

bucket.timeCreatedbucket.timeCreated

Use a date range or specific date to define when the user was created.

Examples

Show buckets created within certain dates

bucket.timeCreated: [2018-01-01 ... 2018-03-01]

Show buckets created from starting 2023-01-01, ending 1 month ago

bucket.timeCreated: [2023-01-01 ... now-1m]

Show buckets created starting 2 weeks ago, ending 1 second ago

bucket.timeCreated: [now-2w ... now-1s]

Show buckets created on specific date

bucket.timeCreated: 2023-01-08

bucket.objectLevelAuditModebucket.objectLevelAuditMode

Use a text value (Enabled, Disabled) to find buckets with the specified audit mode.

Examples

Show buckets created with certain audit mode

bucket.objectLevelAuditMode: Enabled

bucket.storageTierbucket.storageTier

Select from the dropdown (Archive, InfrequentAccess, Standard) to find buckets with the provided storage tier.

Examples

Show buckets with the selected storage tier

bucket.storageTier: Archive

OCI: IAM User

user.iduser.id

Use values within quotes to help you find IAM users with a certain user ID.

Examples

Show any findings with this ID

user.Id: ABCDEFGHIJ1K2

Show any findings that contain parts of ID

user.Id: "ABCDEFGHIJ1K2"

user.nameuser.name

Use values within quotes to help you find IAM users with a certain user name.

Examples

Show any findings with this name

user.name: Jane

user.isMfaActivateduser.isMfaActivated

Use the values true | false to find IAM users with multi-factor authentication enabled.

Examples

Show findings with multi-factor authentication enabled

user.isMfaActivated: true

Show findings without multi-factor authentication enabled

user.isMfaActivated: false

user.lifecycleStateuser.lifecycleState

Select from the dropdown to find users with the selected lifecycle state.

Example

Show findings with user lifecycle, Active

user.lifecyclestate: Active

user.canUseConsolePassworduser.canUseConsolePassword

Use the values true | false to find IAM users with console password enabled.

Examples

Show findings with console password enabled

user.canUseConsolePassword: true

user.tenantIduser.tenantId

Use a text value ##### to find IAM users of specified Tenant ID.

Example

Show findings with this Tenant ID

user.tenantId: a3a33997d333416174cb4c27fa89364a2f31b12498ffc

user.lastSuccessfulLoginTimeuser.lastSuccessfulLoginTime

Use a date range or specific date to define when the user last successfully logged in.

Examples

Show users logged in within certain dates

user.lastSucessfulLoginTime: [2018-01-01 ... 2018-03-01]

Show users logged in from starting 2023-01-01, ending 1 month ago

user.lastSucessfulLoginTime: [2023-01-01 ... now-1m]

Show users logged in starting 2 weeks ago, ending 1 second ago

user.lastSucessfulLoginTime: [now-2w ... now-1s]

user.timeCreateduser.timeCreated

Use a date range or specific date to define when the user was created.

Examples

Show users created within certain dates

user.timeCreated: [2018-01-01 ... 2018-03-01]

Show users created from starting 2023-01-01, ending 1 month ago

user.timeCreated: [2023-01-01 ... now-1m]

Show users created starting 2 weeks ago, ending 1 second ago

user.timeCreated: [now-2w ... now-1s]

Show users created on specific date

user.timeCreated: 2023-01-08

user.timeModifieduser.timeModified

Use a date range or specific date to define when the user was modified.

Examples

Show users modified within certain dates

user.timeModified: [2018-01-01 ... 2018-03-01]

Show users modified from starting 2023-01-01, ending 1 month ago

user.timeModified: [2023-01-01 ... now-1m]

Show users modified starting 2 weeks ago, ending 1 second ago

user.timeModified: [now-2w ... now-1s]

Show users modified on specific date

user.timeModified: 2023-01-08

OCI: Instance

instance.availabilityDomaininstance.availabilityDomain

Select the availability domain you're interested in. Select from names in the drop-down menu.

Example

Show findings in the us-east-1a availability domain

instance.availabilityDomain: Lhkx:US-ASHBURN-AD-1

instance.compartmentIdinstance.compartmentId

Use a text value ##### to find OCI instances with a certain Compartment ID.

Example

Show findings with this Compartment ID

instance.compartmentId:ocid1.tenancy.oc1..xxxxx

instance.displayNameinstance.displayName

Use a text value ##### to find OCI instances having a certain display name.

Example

Show all OCI instances having specified display name.

instance.displayName: (*..*)

instance.faultDomaininstance.faultDomain

Use a text value ##### to find OCI instances with the given fault domain.

Example

Show findings with this failt domain

instance.faultDomain: FAULT-DOMAIN-1

instance.idinstance.id

Use a text value ##### to find OCI instances having a certain Instance ID.

Example

Show findings with this Instance ID

instance.Id: 1e37cd76

instance.imageIdinstance.imageId

Use a text value ##### to find OCI instances with a certain Image (AMI) ID.

Example

Show findings with this image ID

instance.imageId: ami-2ea83347

instance.isPvEncryptionInTransitEnabledinstance.isPvEncryptionInTransitEnabled

Use true | false to view the instances with PV Encryption in Transit enabled/disabled.

Example

Show instances with PV Encryption enabled

instance.isPVEncryptionEnabled: TRUE

instance.lifecycleStateinstance.lifecycleState

Select from the dropdown to find instances with the selected lifecycle state.

Example

Show findings with instance lifecycle, RUNNING

instance.lifecyclestate: RUNNING

instance.privateIpinstance.privateIp

Use a text value ##### to find OCI instances having network interface with a certain private IP address.

Example

Show findings with this private IP

instance.privateIp: 10.0.0.85

instance.publicIpinstance.publicIp

Use a text value ##### to find OCI instances having network interface with a certain public IP address.

Example

Show findings with this public IP

instance.publicIp: 52.70.141.154

instance.regioninstance.region

Select the region code from the drop-down menu. The drop-down menu options contain region code. For example, the region code for Singapore is ap-southeast-1.

Example

Find resources in the ap-southeast-1 (Singapore) region

instance.region: ap-southeast-1

instance.secureBootEnabledinstance.secureBootEnabled

Use true | false to view the instances with Secure Boot enabled/disabled.

Example

Show instances with Secure Boot enabled

instance.secureBootEnabled: TRUE

instance.shapeinstance.shape

Select from the dropdown to find OCI instances having a specified shape.

Example

Show findings with this instance shape

instance.shape: VM.Standard3.Flex

OCI: Security List

securitylist.compartmentIdsecuritylist.compartmentId

Use a text value ##### to find Security Lists with a certain Compartment ID.

Example

Show findings with this Compartment ID

securitylist.compartmentId: ocid1.tenancy.oc1..xxxxx

securitylist.displayNamesecuritylist.displayName

Use a text value ##### to find Security Lists with a certain display name.

Example

Show findings with this display name

securitylist.displayName: testname

securitylist.egressSecurityRules.destinationsecuritylist.egressSecurityRules.destination

Use an integer value ##### to find security lists having egress rules with a certain destination.

Example

Show findings with this destination

securitylist.egressSecurityRules.destination: 0.0.0.0/0

securitylist.egressSecurityRules.destinationPortRange.minsecuritylist.egressSecurityRules.destinationPortRange.min

Use an integer value ##### to find security lists with the given minimum number in destination port range allowing outbound traffic.

Example

Show findings with this minimum destination port range

securitylist.egressSecurityRules.destinationPortRange.min: 0

securitylist.egressSecurityRules.destinationPortRange.maxsecuritylist.egressSecurityRules.destinationPortRange.max

Use an integer value ##### to find security lists with the given maximum number in destination port range allowing outbound traffic.

Example

Show findings with this maximum destination port range

securitylist.egressSecurityRules.destinationPortRange.max: 65535

securitylist.egressSecurityRules.isStatelesssecuritylist.egressSecurityRules.isStateless

Use true | false to find security lists for outbountd traffic that are stateless.

Example

Show findings with stateless set to true

securitylist.egressSecurityRules.isStateless: true

securitylist.egressSecurityRules.protocolsecuritylist.egressSecurityRules.protocol

Select from the drop-down to find security lists with the given protocol.

Example

Show findings with this protocol

securitylist.egressSecurityRules.protocol: RDP

securitylist.egressSecurityRules.sourcePortRange.minsecuritylist.egressSecurityRules.sourcePortRange.min

Use an integer value ##### to find security lists with the given minimum number in source port range allowing outbound traffic.

Example

Show findings with this minimum source port range

securitylist.egressSecurityRules.sourcePortRange.min:0

securitylist.egressSecurityRules.sourcePortRange.maxsecuritylist.egressSecurityRules.sourcePortRange.max

Use an integer value ##### to find security lists with the given maximum number in the source port range, allowing outbound traffic.

Example

Show findings with this maximum source port range

securitylist.egressSecurityRules.sPortRange.max: 65535

securitylist.idsecuritylist.id

Use a text value ##### to find Security Lists with a certain ID.

Example

Show findings with this ID

securitylist.id: xxxxx

securitylist.ingressSecurityRules.destinationPortRange.minsecuritylist.ingressSecurityRules.destinationPortRange.min

Use an integer value ##### to find security lists with the given minimum number in destination port range allowing inbound traffic.

Example

Show findings with this minimum destination port range

securitylist.ingressSecurityRules.destinationPortRange.min: 0

securitylist.ingressSecurityRules.destinationPortRange.maxsecuritylist.ingressSecurityRules.destinationPortRange.max

Use an integer value ##### to find security lists with the given maximum number in the destination port range, allowing inbound traffic.

Example

Show findings with this maximum destination port range

securitylist.ingressSecurityRules.destinationPortRange.max: 65535

securitylist.ingressSecurityRules.isStatelesssecuritylist.ingressSecurityRules.isStateless

Use true | false to find security lists for inbound traffic that are stateless.

Example

Show findings with stateless set to true

securitylist.ingressSecurityRules.isStateless: true

securitylist.ingressSecurityRules.protocolsecuritylist.ingressSecurityRules.protocol

Select from the drop-down to find security lists with the given protocol.

Example

Show findings with this protocol

securitylist.ingressSecurityRules.protocol: RDP

securitylist.ingressSecurityRules.sourcesecuritylist.ingressSecurityRules.source

Use a text value ##### to find security lists with the given traffic source.

Example

Show findings with the given source

securitylist.ingressSecurityRules.source: 0.0.0.0/0

securitylist.ingressSecurityRules.sourcePortRange.minsecuritylist.ingressSecurityRules.sourcePortRange.min

Use an integer value ##### to find security lists with the given minimum number in source port range, allowing inbound traffic.

Example

Show findings with this minimum source port range

securitylist.ingressSecurityRules.sourcePortRange.min:0

securitylist.ingressSecurityRules.sourcePortRange.maxsecuritylist.ingressSecurityRules.sourcePortRange.max

Use an integer value ##### to find security lists with the given maximum number in the source port range, allowing inbound traffic.

Example

Show findings with this maximum source port range

securitylist.ingressSecurityRules.sourcePortRange.max: 65535

secuirtylist.timeCreatedsecuirtylist.timeCreated

Use a date range or specific date to define when the secuirtylist was created.

Examples

Show securitylists created within certain dates

securitylists.timeCreated: [2018-01-01 ... 2018-03-01]

Show securitylists created from starting 2023-01-01, ending 1 month ago

securitylists.timeCreated: [2023-01-01 ... now-1m]

Show securitylists created starting 2 weeks ago, ending 1 second ago

securitylists.timeCreated: [now-2w ... now-1s]

Show securitylists created on specific date

securitylists.timeCreated: 2023-01-08

securitylist.lifecyclestatesecuritylist.lifecyclestate

Select a lifecycle state (PROVISIONING, AVAILABLE, TERMINATING, TERMINATED) to find security groups having the selected lifecycle state. Select from the dropdown.

Example

Show findings with the lifecycle state AVAILABLE

securitylist.lifecyclestate: AVAILABLE

securitylist.vcnIdsecuritylist.vcnId

Use a text value ##### to find Security Lists with a certain VCN ID.

Example

Show findings with this VCN ID

securitylist.vcnId: xxxxx