Searching for Executions Images
Use the search tokens below to search for Executions Images. Looking for help with writing your query? click here.
sensor.uuidsensor.uuid
Use a text value ##### to find execution images having specific sensor UUID.
Example
Show execution images having sensor uuid as ??.
sensor.uuid: ??
container.image.idcontainer.image.id
Use a text value ##### to find execution images having specific container image id.
Example
Show execution images having container image id as ??.
container.image.id: ??
job.execution.statusjob.execution.status
Use a text value ##### to find execution images having specific status ('Failed', 'InProgress', 'Scanned', and 'Queued').
Example
Show execution images having status as Queued.
job.execution.status: Queued
andand
Use a boolean query to express your query using AND logic.
Example
Show execution images with type Standard and with action Allow.
eventType: STANDARD and action: ALLOW
notnot
Use a boolean query to express your query using NOT logic.
Example
Show execution image that don't have Deny action.
not action: DENY
oror
Use a boolean query to express your query using OR logic.
Example
Show execution image with one of these actions - ALLOW and MONITOR.
action: ALLOW or action: MONITOR