Home

Searching for Sensors

Use the search tokens below to search for sensors. Looking for help with writing your query? click here

activationUuidactivationUuid

Use a text value ##### to find sensors having an activation UUID.

Example

Show findings with this activation UUID

activationUuid: ed46df944e1c

architecturearchitecture

Use a text value ##### to find sensors by the host architecture (amd64, arm64, x86_64).

Example

Show findings with arm64 host architecture

architecture: arm64

cluster.k8s.node.isMastercluster.k8s.node.isMaster

Use the values true | false to find sensors running on the master node.

Example

Show sensors running on the master node

cluster.k8s.node.isMaster: true

cluster.k8s.node.namecluster.k8s.node.name

Use a text value ##### to find sensors by the Kubernetes cluster node name.

Example

Show sensors with this node name

cluster.k8s.node.name: my-node

cluster.k8s.pod.controller.namecluster.k8s.pod.controller.name

Use a text value ##### to find sensors by the Kubernetes cluster pod controller name.

Example

Show sensors with this pod controller name

cluster.k8s.pod.controller.name: my-controller

cluster.k8s.pod.controller.typecluster.k8s.pod.controller.type

Use a text value ##### to find sensors by the Kubernetes cluster pod controller type (DaemonSet).

Example

Show sensors with this pod controller type

cluster.k8s.pod.controller.type: DaemonSet

cluster.k8s.pod.controller.uuidcluster.k8s.pod.controller.uuid

Use a text value ##### to find sensors by the Kubernetes cluster pod controller uuid.

Example

Show sensors with this pod controller uuid

cluster.k8s.pod.controller.uuid: 01234567-89ab-cdef-0123-456789abcdef

cluster.k8s.pod.label.keycluster.k8s.pod.label.key

Use a text value ##### to find containers by a label name (key) assigned to the Kubernetes cluster pod.

Example

Show containers with this pod label name

cluster.k8s.pod.label.key: environment

cluster.k8s.pod.label.valuecluster.k8s.pod.label.value

Use a text value ##### to find containers by a label value assigned to the Kubernetes cluster pod.

Example

Show containers with this pod label value

cluster.k8s.pod.label.value: production

cluster.k8s.pod.namecluster.k8s.pod.name

Use a text value ##### to find sensors by the Kubernetes cluster pod name.

Example

Show sensors with this pod name

cluster.k8s.pod.name: my-pod

cluster.k8s.pod.namespacecluster.k8s.pod.namespace

Use a text value ##### to find sensors by the Kubernetes cluster pod namespace.

Example

Show sensors with this pod namespace

cluster.k8s.pod.namespace: my.namespace.example.com

cluster.k8s.pod.uuidcluster.k8s.pod.uuid

Use a text value ##### to find sensors by the Kubernetes cluster pod uuid.

Example

Show sensors with this pod uuid

cluster.k8s.pod.uuid: 01234567-89ab-cdef-0123-456789abcdef

cluster.k8s.projectcluster.k8s.project

Use a text value ##### to find sensors by the Kubernetes cluster project name.

Example

Show sensors with this Kubernetes cluster project

cluster.k8s.project: my-project

cluster.typecluster.type

Use a text value ##### to find sensors by the cluster type (KUBERNETES).

Example

Show sensors with the Kubernetes cluster type

cluster.type: KUBERNETES

containerIpv4containerIpv4

Use a text value ##### to define a container IPv4 address of interest.

Example

Show containers on this IPv4 address

containerIpv4: 172.17.0.2

containerIpv6containerIpv6

Use a text value ##### to define a container IPv6 address of interest.

Example

Show containers on this IPv6 address

containerIpv6: fe80:0:0:0:2502:b53c:4139:404b

containerMacAddresscontainerMacAddress

Use a text value ##### to define a container MAC address you're interested in.

Example

Show container with this MAC address

containerMacAddress: 00-50-56-A9-73-5A

containerRuntimecontainerRuntime

Use a text value ##### to find a container based on Runtime type (DOCKER, CONTAINERD, CRI-O).

Example

Show container with this Runtime type

containerRuntime: DOCKER

containerRuntimeVersioncontainerRuntimeVersion

Use a text value ##### to find the Runtime version you're interested in.

Example

Show container with this Runtime version

containerRuntimeVersion: 1.3

createdcreated

Use a date range or specific date to define when sensors were created.

Examples

Find sensors created within certain dates

created: [2017-06-15 ... 2017-06-30]

Find sensors created on specific date

created:'2017-08-15'

dockerVersiondockerVersion

Use a text value ##### to find Docker version you're interested in.

Example

Show sensors with this Docker version

dockerVersion: 1.3

hostnamehostname

Use a text value ##### to define the sensor hostname you're looking for.

Example

Show sensors with this hostname

hostname: dockerhost07.mydomain.com

imageIdimageId

Use a text value ##### to define a sensor image ID of interest.

Example

Show sensors with this image ID

imageId: c2d1b73a90ec

imageShaimageSha

Use a text value ##### to define SHA 256 hash of sensor image.

Example

Show container image with this SHA value

imageSha: 163dc7f6b91a30bdaa867c28e7edc341e72da63b0f9056be497bd59a83bce695

ipv4ipv4

Use a text value ##### to define a sensor IPv4 address of interest.

Example

Show sensors on this IPv4 address

ipv4: 172.17.0.2

ipv6ipv6

Use a text value ##### to define a sensor IPv6 address of interest.

Example

Show sensors on this IPv6 address

ipv6: fe80:0:0:0:2502:b53c:4139:404b

label.keylabel.key

Use a text value ##### to find sensors with a certain label name.

Example

Show sensors with label name "vendor"

label.key: "vendor"

label.valuelabel.value

Use a text value ##### to find sensors with a certain label value.

Example

Show sensors with label value "CentOS"

label.value: "CentOS"

lastCheckedInlastCheckedIn

Use a date range or specific date to define when sensors last checked in.

Examples

Find sensors with last checkin within certain dates

lastCheckedIn: [2017-06-15 ... 2017-06-30]

Find sensors with last checkin on specific date

lastCheckedIn:'2017-08-15'

macAddressmacAddress

Use a text value ##### to define a sensor MAC address you're interested in.

Example

Show sensor with this MAC address

macAddress: 00-50-56-A9-73-5A

namename

Use a text value ##### to define the sensor name you're interested in.

Example

Show this sensor name

name: "my-sensor"

osos

Use values within quotes or backticks to help you find sensors on an operating system you're interested in.

Examples

Show any sensors on this OS name

os: Windows 2012

Show any sensors contain components of OS name

os: "Windows 2012"

Show sensors that match exact value "Windows 2012"

os: `Windows 2012`

privilegedprivileged

Use the values true | false to find privileged sensors.

Example

Show privileged sensors

privileged: true

registryregistry

Use a text value ##### to find sensors having a registry name you're interested in.

Example

Show findings with this registry name

registry: "registry-name"

sensorIdsensorId

Use a text value ##### to find a sensor ID.

Example

Show sensor with this ID

sensorId: ed46df944e1c

sensorTypesensorType

Use a text value ##### to find sensors by type (CICD, GENERAL, REGISTRY, SERVERLESS_FARGATE).

Example

Show registry sensors

sensorType: REGISTRY

sensorVersionsensorVersion

Use a text value ##### to find sensor version you're interested in.

Example

Show sensors with this version

sensorVersion: 1.3

shasha

Use a text value ##### to define SHA 256 hash of container image.

Example

Show findings with this SHA value

sha: 163dc7f6b91a30bdaa867c28e7edc341e72da63b0f9056be497bd59a83bce695

statusstatus

Use a text value ##### to define sensors with a certain status (Running or Unknown).

Example

Show sensors with running status

status: "Running"

uuiduuid

Use a text value ##### to define a sensor UUID of interest.

Example

Show sensor for this UUID

uuid: c7d66569-5c17-47f6-a8b9-f640cfe71cec

andand

Use a boolean query to express your query using AND logic.

Example

Show sensors with Docker runtime and with runtime version 19

containerRuntime: DOCKER and containerRuntimeVersion: 19

notnot

Use a boolean query to express your query using NOT logic.

Example

Show sensors that don't have sensor type Registry

not sensorType: REGISTRY

oror

Use a boolean query to express your query using OR logic.

Example

Show sensors with one of these sensor types

sensorType: GENERAL or sensorType: REGISTRY


 

 

Was this topic helpful?

success Thank you! We're glad to hear that this topic was useful.
success We appreciate your feedback. We'll work to make this topic better for you in the future.