Supported Operators for v1 APIs
This topic provides an overview of the supported tokens and the operators that can be used with those tokens across CSAM v1 APIs.
Supported Operators
The following dropdown provides the list of operators:
List of OperatorsList of Operators
|
Operator |
Values |
|---|---|
|
NUMERIC_OPERATORS |
EQUALS, IN, NOT_EQUALS, GREATER, LESSER, GREATER_THAN_EQUAL, and LESS_THAN_EQUAL |
|
NUMERIC_AND_NOT_EQUAL_OPERATORS |
EQUALS, IN, GREATER, LESSER, GREATER_THAN_EQUAL, LESS_THAN_EQUAL |
|
STRING_OPERATORS |
CONTAINS, IN, EQUALS, and NOT_EQUALS |
|
STRING_AND_NOT_EQUAL_OPERATORS |
CONTAINS, IN, and EQUALS |
|
DATE_OPERATORS |
EQUALS, NOT_EQUALS, GREATER, LESSER, GREATER_THAN_EQUAL, and LESS_THAN_EQUAL |
|
BOOLEAN_OPERATORS |
EQUALS |
|
ENUM_OPERATORS |
EQUALS, NOT_EQUALS, and IN |
|
UUID_OPERATORS |
EQUALS and IN |
|
IP_OPERATORS |
EQUALS and IN |
Supported Tokens by API
The complete list of tokens and their supported operators for the Asset Host Data APIs is listed in the drop-down below.
These tokens are supported by the following APIs:
- Count of Assets
- List host details of all assets
- List host details of a specific asset
- List host details for specific fields
List of supported operatorsList of supported operators
Account
| Token | Operator |
|---|---|
| account.username | STRING_OPERATORS |
Agent
| Token | Operator |
|---|---|
| qualys.agent.activationKey.uuid | UUID_OPERATORS |
| qualys.agent.activationKey.status | ENUM_OPERATORS |
| agent.agentID | NUMERIC_OPERATORS |
| agent.connectedFrom | IP_OPERATORS |
| agent.errorStatus | BOOLEAN_OPERATORS |
| qualys.agent.lastActivityDate | DATE_OPERATORS |
| qualys.agent.lastCheckedInDate | DATE_OPERATORS |
| agent.version | NUMERIC_AND_NOT_EQUAL_OPERATORS |
Alibaba
| Token | Operator |
|---|---|
| alibaba.instance.accountId | STRING_OPERATORS |
| alibaba.instance.dnsServer | STRING_OPERATORS |
| alibaba.instance.hasAgent | BOOLEAN_OPERATORS |
| alibaba.instance.hostName | STRING_AND_NOT_EQUAL_OPERATORS |
| alibaba.instance.imageId | STRING_OPERATORS |
| alibaba.instance.instanceId | STRING_OPERATORS |
| alibaba.instance.instanceState | STRING_OPERATORS |
| alibaba.instance.instanceType | STRING_OPERATORS |
| alibaba.instance.interfaceId | STRING_OPERATORS |
| alibaba.instance.macAddress | STRING_OPERATORS |
| alibaba.instance.networkType | STRING_OPERATORS |
| alibaba.instance.privateIpAddress | IP_OPERATORS |
| alibaba.instance.publicIpAddress | IP_OPERATORS |
| alibaba.instance.regionCode | STRING_OPERATORS |
| alibaba.instance.serialNumber | STRING_OPERATORS |
| alibaba.instance.vpcCidrBlock | STRING_OPERATORS |
| alibaba.instance.vpcId | STRING_OPERATORS |
| alibaba.instance.vswitchCidrBlock | STRING_OPERATORS |
| alibaba.instance.vswitchId | STRING_OPERATORS |
| alibaba.instance.zoneId | STRING_OPERATORS |
| alibaba.tags.key | STRING_OPERATORS |
| alibaba.tags.value | STRING_OPERATORS |
Asset
| Token | Operator |
|---|---|
| asset.asn | STRING_OPERATORS |
| asset.id | STRING_OPERATORS |
| compute.hostId | NUMERIC_OPERATORS |
| qualys.passiveSensor.lparId | STRING_OPERATORS |
| asset.subDomain | STRING_OPERATORS |
| asset.assignedLocation.city | STRING_OPERATORS |
| asset.assignedLocation.country | STRING_OPERATORS |
| asset.assignedLocation.name | STRING_OPERATORS |
| asset.assignedLocation.state | STRING_OPERATORS |
| asset.biosAssetTag | STRING_OPERATORS |
| asset.biosDescription | STRING_OPERATORS |
| asset.biosHardwareUuid | UUID_OPERATORS |
| asset.biosSerialNumber | STRING_OPERATORS |
| asset.cpuCount | NUMERIC_OPERATORS |
| asset.createdDate | DATE_OPERATORS |
| asset.criticalityScore | NUMERIC_OPERATORS |
| asset.domain | STRING_OPERATORS |
| compute.domainRole | ENUM_OPERATORS |
| asset.businessInfo.environment | STRING_OPERATORS |
| asset.hasMissingSoftware | BOOLEAN_OPERATORS |
| asset.hostingCategory1 | ENUM_OPERATORS |
| compute.isContainerHost | BOOLEAN_OPERATORS |
| asset.isp | STRING_OPERATORS |
| compute.lastBootDate | DATE_OPERATORS |
| asset.lastLocation.name | STRING_OPERATORS |
| asset.lastLocation.city | STRING_OPERATORS |
| asset.lastLocation.continent | STRING_OPERATORS |
| asset.lastLocation.country | STRING_OPERATORS |
| asset.lastLocation.postal | STRING_OPERATORS |
| asset.lastLocation.state | STRING_OPERATORS |
| compute.lastLoggedOnUser | STRING_OPERATORS |
| asset.lastUpdatedDate | DATE_OPERATORS |
| asset.businessInfo.managedBy.username | STRING_OPERATORS |
| asset.name | STRING_OPERATORS |
| asset.netbiosName | STRING_OPERATORS |
| asset.businessInfo.operationalStatus | STRING_OPERATORS |
| asset.businessInfo.ownedBy.username | STRING_OPERATORS |
| asset.truRisk | ENUM_OPERATORS |
| asset.businessInfo.supportedBy.username | STRING_OPERATORS |
| asset.businessInfo.supportGroup | STRING_OPERATORS |
| compute.timezone | STRING_OPERATORS |
| compute.totalMemory | NUMERIC_OPERATORS |
| asset.trackingMethod | ENUM_OPERATORS |
| asset.type | ENUM_OPERATORS |
| asset.interface.address | IP_OPERATORS |
| asset.interface.dnsAddress | IP_OPERATORS |
| asset.interface.gatewayAddress | IP_OPERATORS |
| asset.interface.hostname | STRING_AND_NOT_EQUAL_OPERATORS |
| asset.interface.name | STRING_AND_NOT_EQUAL_OPERATORS |
| asset.interface.macAddress | STRING_AND_NOT_EQUAL_OPERATORS |
| asset.interface.manufacturer | STRING_AND_NOT_EQUAL_OPERATORS |
| asset.interface.netmask | IP_OPERATORS |
| asset.inventory.source | STRING_OPERATORS |
| asset.inventory.createdDate | DATE_OPERATORS |
| asset.inventory.lastUpdatedDate | DATE_OPERATORS |
| asset.tag.businessImpact | STRING_AND_NOT_EQUAL_OPERATORS |
| asset.tag.id | STRING_OPERATORS |
| asset.tag.name | STRING_OPERATORS |
| cloud.provider | STRING_OPERATORS |
| isDockerHost | BOOLEAN_OPERATORS |
| org.company | STRING_OPERATORS |
| org.department | STRING_OPERATORS |
| org.name | STRING_OPERATORS |
AWS
| Token | Operator |
|---|---|
| aws.ec2.accountId | STRING_OPERATORS |
| aws.ec2.availabilityZone | STRING_OPERATORS |
| aws.ec2.hasAgent | BOOLEAN_OPERATORS |
| aws.ec2.hostname | STRING_OPERATORS |
| aws.ec2.imageId | STRING_OPERATORS |
| aws.ec2.instanceId | NUMERIC_OPERATORS |
| aws.ec2.instanceState | STRING_OPERATORS |
| aws.ec2.instanceType | STRING_OPERATORS |
| aws.ec2.launchDate | DATE_OPERATORS |
| aws.ec2.privateDNS | STRING_OPERATORS |
| aws.ec2.privateIpAddress | IP_OPERATORS |
| aws.ec2.publicDns | STRING_OPERATORS |
| aws.ec2.publicIpAddress | IP_OPERATORS |
| aws.ec2.region.code | STRING_OPERATORS |
| aws.ec2.spotInstance | STRING_OPERATORS |
| aws.ec2.subnetId | NUMERIC_OPERATORS |
| aws.ec2.vpcId | NUMERIC_OPERATORS |
| aws.tag:(key | STRING_OPERATORS |
| aws.tag:(value | STRING_OPERATORS |
Azure
| Token | Operator |
|---|---|
| azure.tag:(name | STRING_OPERATORS |
| azure.tag:(value | STRING_OPERATORS |
| azure.vm.hasAgent | BOOLEAN_OPERATORS |
| azure.vm.imageOffer | STRING_OPERATORS |
| azure.vm.imagePublisher | STRING_OPERATORS |
| azure.vm.imageVersion | STRING_OPERATORS |
| azure.vm.location | STRING_OPERATORS |
| azure.vm.macAddress | STRING_OPERATORS |
| azure.vm.name | STRING_OPERATORS |
| azure.vm.platform | STRING_OPERATORS |
| azure.vm.privateIpAddress | IP_OPERATORS |
| azure.vm.publicIpAddress | IP_OPERATORS |
| azure.vm.resourceGroupName | STRING_OPERATORS |
| azure.vm.size | STRING_OPERATORS |
| azure.vm.state | STRING_OPERATORS |
| azure.vm.subnet | STRING_OPERATORS |
| azure.vm.subscriptionId | STRING_OPERATORS |
| azure.vm.virtualNetwork | STRING_OPERATORS |
| azure.vm.vmId | STRING_OPERATORS |
BusinessApp
| Token | Operator |
|---|---|
| businessApp:(businessCriticality | STRING_OPERATORS |
| businessApp:(environment | STRING_OPERATORS |
| businessApp:(id | STRING_OPERATORS |
| businessApp:(managedBy.username | STRING_OPERATORS |
| businessApp:(name | STRING_OPERATORS |
| businessApp:(operationalStatus | STRING_OPERATORS |
| businessApp:(ownedBy.username | STRING_OPERATORS |
| businessApp:(supportedBy.username | STRING_OPERATORS |
| businessApp:(supportGroup | STRING_OPERATORS |
Connector
| Token | Operator |
|---|---|
| connector:(name | STRING_OPERATORS |
| connector:(id | STRING_OPERATORS |
| connector:(firstFoundDate | DATE_OPERATORS |
| connector:(lastFoundDate | DATE_OPERATORS |
Container
| Token | Operator |
|---|---|
| container.hasSensor | BOOLEAN_OPERATORS |
| container.noOfContainers | NUMERIC_AND_NOT_EQUAL_OPERATORS |
| container.noOfImages | NUMERIC_AND_NOT_EQUAL_OPERATORS |
| container.product | STRING_AND_NOT_EQUAL_OPERATORS |
| container.version | STRING_AND_NOT_EQUAL_OPERATORS |
CustomAttributes
| Token | Operator |
|---|---|
| customAttributes:(connectorId | NUMERIC_OPERATORS |
| customAttributes:(key | STRING_OPERATORS |
| customAttributes:(value | STRING_OPERATORS |
GCP
| Token | Operator |
|---|---|
| gcp.compute.hasAgent | BOOLEAN_OPERATORS |
| gcp.compute.hostname | STRING_OPERATORS |
| gcp.compute.imageId | STRING_OPERATORS |
| gcp.compute.instanceId | STRING_OPERATORS |
| gcp.compute.macAddress | STRING_OPERATORS |
| gcp.compute.machineType | STRING_OPERATORS |
| gcp.compute.network | STRING_OPERATORS |
| gcp.compute.privateIpAddress | IP_OPERATORS |
| gcp.compute.projectId | STRING_OPERATORS |
| gcp.compute.projectNumber | STRING_OPERATORS |
| gcp.compute.publicIpAddress | IP_OPERATORS |
| gcp.compute.state | STRING_OPERATORS |
| gcp.compute.zone | STRING_OPERATORS |
| gcp.tags:(key | STRING_OPERATORS |
| gcp.tags:(value | STRING_OPERATORS |
Hardware
| Token | Operator |
|---|---|
| hardware.name | STRING_OPERATORS |
| hardware.category | STRING_OPERATORS |
| hardware.category1 | STRING_OPERATORS |
| hardware.category2 | STRING_OPERATORS |
| hardware.lifecycle.eos | DATE_OPERATORS |
| hardware.lifecycle.ga | DATE_OPERATORS |
| hardware.lifecycle.intro | DATE_OPERATORS |
| hardware.lifecycle.obs | DATE_OPERATORS |
| hardware.lifecycle.stage | STRING_OPERATORS |
| hardware.manufacturer | STRING_OPERATORS |
| hardware.model | STRING_OPERATORS |
| hardware.product | STRING_OPERATORS |
| hardware.typingConfidence | STRING_OPERATORS |
IBM
| Token | Operator |
|---|---|
| ibm.tag:(name | STRING_OPERATORS |
| ibm.tag:(value | STRING_OPERATORS |
| ibm.virtualServer.datacenterId | STRING_OPERATORS |
| ibm.virtualServer.deviceName | STRING_OPERATORS |
| ibm.virtualServer.domain | STRING_OPERATORS |
| ibm.virtualServer.id | STRING_OPERATORS |
| ibm.virtualServer.location | STRING_OPERATORS |
| ibm.virtualServer.privateIpAddress | IP_OPERATORS |
| ibm.virtualServer.privateVlan | STRING_OPERATORS |
| ibm.virtualServer.publicIpAddress | IP_OPERATORS |
| ibm.virtualServer.publicVlan | STRING_OPERATORS |
| ibm.virtualServer.state | STRING_OPERATORS |
OCI
| Token | Operator |
|---|---|
| oci.compute.availabilityDomain | STRING_OPERATORS |
| oci.compute.canonicalRegionName | STRING_OPERATORS |
| oci.compute.compartmentId | STRING_OPERATORS |
| oci.compute.compartmentName | STRING_OPERATORS |
| oci.compute.displayName | STRING_OPERATORS |
| oci.compute.faultDomain | STRING_OPERATORS |
| oci.compute.hasAgent | BOOLEAN_OPERATORS |
| oci.compute.hostName | STRING_OPERATORS |
| oci.compute.imageId | STRING_OPERATORS |
| oci.compute.ociId | STRING_OPERATORS |
| oci.compute.region | STRING_OPERATORS |
| oci.compute.shape | STRING_OPERATORS |
| oci.compute.state | STRING_OPERATORS |
| oci.compute.tenantId | STRING_OPERATORS |
| oci.compute.tenantName | STRING_OPERATORS |
| oci.compute.timeCreated | STRING_OPERATORS |
| oci.tag:(key | STRING_OPERATORS |
| oci.tag:(namespace | STRING_OPERATORS |
| oci.tag:(type | STRING_OPERATORS |
| oci.tag:(value | STRING_OPERATORS |
| oci.vnic:(macAddr | STRING_OPERATORS |
| oci.vnic:(nicIndex | STRING_OPERATORS |
| oci.vnic:(privateIp | IP_OPERATORS |
| oci.vnic:(publicIp | IP_OPERATORS |
| oci.vnic:(subnetCidrBlock | STRING_OPERATORS |
| oci.vnic:(subnetId | STRING_OPERATORS |
| oci.vnic:(subnetName | STRING_OPERATORS |
| oci.vnic:(vcnId | STRING_OPERATORS |
| oci.vnic:(vcnName | STRING_OPERATORS |
| oci.vnic:(virtualRouterIp | STRING_OPERATORS |
| oci.vnic:(vlanTag | STRING_OPERATORS |
| oci.vnic:(vnicId | STRING_OPERATORS |
Open Ports
| Token | Operator |
|---|---|
| asset.openPorts:(authorization | STRING_OPERATORS |
| asset.openPorts:(description | STRING_AND_NOT_EQUAL_OPERATORS |
| asset.openPorts:(detectedService | STRING_AND_NOT_EQUAL_OPERATORS |
| asset.openPorts:(detectionScore | NUMERIC_OPERATORS |
| asset.openPorts:(discoverySources | STRING_AND_NOT_EQUAL_OPERATORS |
| asset.openPorts:(firstFoundDate | DATE_OPERATORS |
| asset.openPorts:(lastUpdatedDate | DATE_OPERATORS |
| asset.openPorts:(port | STRING_OPERATORS |
| asset.openPorts:(protocol | STRING_OPERATORS |
Operating System
| Token | Operator |
|---|---|
| operatingSystem | STRING_OPERATORS |
| operatingSystem.architecture | STRING_OPERATORS |
| operatingSystem.category | STRING_OPERATORS |
| operatingSystem.category1 | STRING_OPERATORS |
| operatingSystem.category2 | STRING_OPERATORS |
| operatingSystem.component | STRING_OPERATORS |
| operatingSystem.edition | STRING_OPERATORS |
| operatingSystem.installDate | DATE_OPERATORS |
| operatingSystem.lifecycle.detectionScore | NUMERIC_OPERATORS |
| operatingSystem.lifecycle.eol | DATE_OPERATORS |
| operatingSystem.lifecycle.eos | DATE_OPERATORS |
| operatingSystem.lifecycle.ga | DATE_OPERATORS |
| operatingSystem.lifecycle.stage | STRING_OPERATORS |
| operatingSystem.marketVersion | STRING_OPERATORS |
| operatingSystem.name | STRING_OPERATORS |
| operatingSystem.publisher | STRING_OPERATORS |
| operatingSystem.typingConfidence | STRING_OPERATORS |
| operatingSystem.update | STRING_OPERATORS |
| operatingSystem.version | STRING_OPERATORS |
Passive Sensor
| Token | Operator |
|---|---|
| qualys.passiveSensor.id | STRING_OPERATORS |
| qualys.passiveSensor.location | STRING_OPERATORS |
| qualys.passiveSensor.name | STRING_OPERATORS |
Processor
| Token | Operator |
|---|---|
| processor.name | STRING_AND_NOT_EQUAL_OPERATORS |
| processor.coresPerSocket | NUMERIC_OPERATORS |
| processor.multiThreadingStatus | BOOLEAN_OPERATORS |
| processor.noOfCpu | NUMERIC_OPERATORS |
| processor.speed | NUMERIC_AND_NOT_EQUAL_OPERATORS |
| processor.threadsPerCore | NUMERIC_OPERATORS |
| processor.noOfSockets | NUMERIC_OPERATORS |
Sensor
| Token | Operator |
|---|---|
| sensor.firstEasmScanDate | DATE_OPERATORS |
| sensor.lastComplianceScanDate | DATE_OPERATORS |
| sensor.lastEasmScanDate | DATE_OPERATORS |
| sensor.lastFullScanDate | DATE_OPERATORS |
| sensor.lastPcAgentScanDate | DATE_OPERATORS |
| sensor.lastPcScannerScanDate | DATE_OPERATORS |
| sensor.lastVmScanDate | DATE_OPERATORS |
| sensor.lastVmAgentScanDate | DATE_OPERATORS |
| sensor.lastVmScannerScanDate | DATE_OPERATORS |
Service
| Token | Operator |
|---|---|
| compute.service:(description | STRING_AND_NOT_EQUAL_OPERATORS |
| compute.service:(name | STRING_AND_NOT_EQUAL_OPERATORS |
| compute.service:(status | STRING_AND_NOT_EQUAL_OPERATORS |
Software
| Token | Operator |
|---|---|
| software:(architecture | STRING_OPERATORS |
| software:(authorization | ENUM_OPERATORS |
| software:(authorization.id | STRING_OPERATORS |
| software:(authorizationDetectionScore | NUMERIC_OPERATORS |
| software:(category | STRING_OPERATORS |
| software:(category1 | STRING_OPERATORS |
| software:(category2 | STRING_OPERATORS |
| software:(component | STRING_OPERATORS |
| software:(discoverySources | STRING_OPERATORS |
| software:(edition | STRING_OPERATORS |
| software:(hasRunningInstance | BOOLEAN_OPERATORS |
| software:(installDate | DATE_OPERATORS |
| software:(isPackage | BOOLEAN_OPERATORS |
| software:(isPackageComponent | BOOLEAN_OPERATORS |
| software:(isRequired | BOOLEAN_OPERATORS |
| software:(lastUpdatedDate | DATE_OPERATORS |
| software:(lastUsedDate | DATE_OPERATORS |
| software:(license.category | STRING_OPERATORS |
| software:(license.subcategory | STRING_OPERATORS |
| software:(lifecycle.detectionScore | NUMERIC_OPERATORS |
| software:(lifecycle.eol | DATE_OPERATORS |
| software:(lifecycle.eos | DATE_OPERATORS |
| software:(lifecycle.ga | DATE_OPERATORS |
| software:(lifecycle.stage | EQUALS and NOT_EQUALS |
| software:(marketVersion | STRING_OPERATORS |
| software:(name | STRING_OPERATORS |
| software:(product | STRING_OPERATORS |
| software:(publisher | STRING_OPERATORS |
| software:(supportStage | ENUM_OPERATORS |
| software:(update | STRING_OPERATORS |
| software:(updateOrder | NUMERIC_OPERATORS |
| software:(version | STRING_OPERATORS |
| software:(versionOrder | NUMERIC_OPERATORS |
| missingSoftware:(category1 | STRING_OPERATORS |
| missingSoftware:(category2 | STRING_OPERATORS |
| missingSoftware:(detectionScore | NUMERIC_OPERATORS |
| missingSoftware:(name | STRING_OPERATORS |
| missingSoftware:(product | STRING_OPERATORS |
| missingSoftware:(publisher | STRING_OPERATORS |
Volume
| Token | Operator |
|---|---|
| volume:(free | NUMERIC_AND_NOT_EQUAL_OPERATORS |
| volume:(name | STRING_AND_NOT_EQUAL_OPERATORS |
| volume:(size | NUMERIC_AND_NOT_EQUAL_OPERATORS |
EASM
| Token | Operator |
|---|---|
| easm.tag.name | STRING_OPERATORS |
| whoIs:(createdDate | DATE_OPERATORS |
| whoIs:(expirationDate | DATE_OPERATORS |
| whoIs:(registrantCountry | STRING_OPERATORS |
| whoIs:(registrantEmailId | STRING_OPERATORS |
| whoIs:(registrantOrg | STRING_OPERATORS |
| whoIs:(registrar | STRING_OPERATORS |