How to enter dates in your queries

To search for dates you'll use a date range [start date .. end date] or a specific date. Several date variables are available.

Date variables

Date variables help you define a date or a date range you're interested in. We support the following date formats: yyyy, yyyy-MM, yyyy-MM-dd.

Find containers with vulnerabilities last found between January 1st 2020 and December 31st 2020 (i.e. yyyy)

vulnerabilities.lastFound: "2020"

Find containers with vulnerabilities last found between 01 November 2020 and 30 November 2020 (i.e. yyyy-MM)

vulnerabilities.lastFound: "2020-11"

Find containers with vulnerabilities last found anytime on November 1st 2020 (i.e. yyyy-MM-dd)

vulnerabilities.lastFound: "2020-11-01"

Find containers with vulnerabilities last found on November 1st 2020 from 10am to 11am (i.e. yyyy-MM-dd HH)

vulnerabilities.lastFound: "2020-11-01 10"

Find containers with vulnerabilities last found on November 1st 2020 at 10:15am (i.e. yyyy-MM-dd HH:mm)

vulnerabilities.lastFound: "2020-11-01 10:15"

Find containers with vulnerabilities last found on November 1st 2020 at 10:15:44am (i.e. yyyy-MM-dd HH:mm:ss)

vulnerabilities.lastFound: "2020-11-01 10:15:44"

Use the "now" shortcut

Type now- followed by a number and any of the following time units: y (year), M (month), w (week), d (day), h (hour), m (minute), s (second)

Examples:

now-1y for 1 year ago

now-2M for 2 months ago

now-5d for 5 days ago

Comparison operators

We support comparison operators in your date searches.

Examples:

created > 2020-10-12

created >= 2020-10-12

created < 2020-10-12

created <= 2020-10-12

Examples

Find containers last scanned for vulnerabilities between 1-2 months ago

lastVmScanDate: [now-2M .. now-1M]

Find containers last scanned for vulnerabilities between January 1st and April 1st 2020

lastVmScanDate: [2020-01-01 .. 2020-04-01]

Find containers last scanned for vulnerabilities within last 10 days.

lastVmScanDate>=now-10d (The result includes containers scanned on day 10.)

lastVmScanDate>now-10d (The result excludes containers scanned on day 10.)

Find containers last scanned for vulnerabilities between 2020-10-01 and 2020-10-03

lastVmScanDate: [2020-10-01 .. 2020-10-03]

Find containers last scanned for vulnerabilities on November 1st 2020

lastVmScanDate: '2020-11-01'

Find containers last scanned for vulnerabilities on November 1st 2020 at time 10:53:49

lastVmScanDate: "2020-11-01 10:53:49"

Find containers last scanned for vulnerabilities before the last 30 days.

lastVmScanDate<now-30d

See QQL Best Practices in Unified Dashboard help for some ways to improve the performance of QQL search queries and fetch smarter and quicker results.