Using Boolean operators (AND, OR, NOT) give you many ways to refine your search.
We've implemented controls in query parsing for queries containing the operators AND, OR. The maximum depth allowed for an AND/OR query cannot cross 1000 levels. If you run a query having more than 1000 levels of depth, an error is returned.
A simple query like this has level of depth 2
asset: (lastBoot: '2018-10-10' AND cpuCount: 2)
A more complex query like this has level of depth 5
(operatingSystem: "Windows 7 SP2 Enterprise" OR operatingSystem:
"Windows 2002") AND (hardware: "Dell Latitude e7470"
OR hardware: "Dell Inspiron") AND NOT asset.lastBoot <= "2018-11-01"