Search Tokens for Business Information
Syntax help displayed in UI for tokens. Click each token to learn more about it.
Use these tokens when searching for business information assets in the tag creation wizard (Dynamic tag > Business Information rule).
Note:
- For all the date-related tokens, the date search is evaluated only for UTC format. The actual search results might show you the date as per your time zone.
- For the range searches, remember that the QQL search tokens are case-sensitive. Hence, make sure that you enter the correct token syntax. For more information, see Range Searches.
asset.supportGroupasset.supportGroup
Use values within quotes or backticks to help you find assets with support group.
Examples
Show any findings that contain parts of name
asset.supportGroup:"Compliance"
Show any findings that match exact value "Compliance Managers"
asset.supportGroup:`Compliance Managers`
asset.org.companyasset.org.company
Use a text value ##### to help you find assets with company.
Example
Show assets with company as Qualys
asset.org.company: Qualys
asset.org.departmentasset.org.department
Use a text value ##### to help you find assets with department.
Example
Show assets with department as Development
asset.org.department: Development
asset.operationalStatusasset.operationalStatus
Use a text value ##### to help you find assets based on operational status.
Example
Show assets with operational status as Repair
asset.operationalStatus: Repair
asset.environmentasset.environment
Use a text value ##### to help you find assets based on environment.
Example
Show assets with environment as Production
asset.environment: Production
Use values within quotes or backticks to help you find assets owned by.
Examples
Show any findings that contain parts of name
asset.ownedBy:"Joey"
Show any findings that match exact value "Joey Bolick"
asset.ownedBy:`Joey Bolick`
asset.managedByasset.managedBy
Use values within quotes or backticks to help you find assets managed by.
Examples
Show any findings that contain parts of name
asset.managedBy:"Byron"
Show any findings that match exact value "Byron Fortuna"
asset.managedBy:`Byron Fortuna`
asset.supportedByasset.supportedBy
Use values within quotes or backticks to help you find assets supported by.
Examples
Show any findings that contain parts of name
asset.supportedBy:"John"
Show any findings that match exact value "John Doe"
asset.supportedBy:`John Doe`
asset.assignedLocation.nameasset.assignedLocation.name
Use values within quotes or backticks to help you find assets with name of the assigned location.
Examples
Show any findings that contain parts of name
asset.assignedLocation.name:"401 Biscayne
St, Miami"
Show any findings that match exact value "401 Biscayne St, Miami FL"
asset.assignedLocation.name:`401 Biscayne St,
Miami FL`
asset.assignedLocation.cityasset.assignedLocation.city
Use a text value ##### to help you find assets with city of the assigned location.
Example
Show assets with assigned location city as Miami
asset.assignedLocation.city: Miami
asset.assignedLocation.stateasset.assignedLocation.state
Use a text value ##### to help you find assets with state of the assigned location.
Example
Show assets with assigned location state as FL
asset.assignedLocation.state: FL
asset.assignedLocation.countryasset.assignedLocation.country
Use a text value ##### to help you find assets with country of the assigned location.
Example
Show assets with assigned location country as USA
asset.assignedLocation.country: USA
businessApp.namebusinessApp.name
Use values within quotes or backticks to help you find the business application name you're looking for.
Examples
Show any findings that contain parts of name
businessApp:(name:"HR")
Show any findings that match exact value "HR Intranet"
businessApp:(name:`HR Intranet`)
Use a text value ##### to help you find business application using unique ID.
Example
Show findings with business app ID as APP007
businessApp:(id:APP007)
businessApp.operationalStatusbusinessApp.operationalStatus
Use a text value ##### to help you find business applications based on operational status.
Example
Show business applications with operational status as Installed
businessApp:(operationalStatus: Installed)
businessApp.businessCriticalitybusinessApp.businessCriticality
Use values within quotes or backticks to help you find the business application you're looking for.
Examples
Show any findings that contain parts of name
businessApp:(businessCriticality:"1 - most")
Show any findings that match exact value "1 - most critical"
businessApp:(businessCriticality:`1 - most critical`)
businessApp.environmentbusinessApp.environment
Use a text value ##### to help you find business application based on environment.
Example
Show assets with business application environment as Production
businessApp:(environment: Production)
businessApp.ownedBybusinessApp.ownedBy
Use values within quotes or backticks to help you find business applications owned by.
Examples
Show any findings that contain parts of name
businessApp:(ownedBy:"Joey")
Show any findings that match exact value "Joey Bolick"
businessApp:(ownedBy:`Joey Bolick`)
businessApp.managedBybusinessApp.managedBy
Use values within quotes or backticks to help you find business applications managed by.
Examples
Show any findings that contain parts of name
businessApp:(managedBy:"Byron")
Show any findings that match exact value "Byron Fortuna"
businessApp:(managedBy:`Byron Fortuna`)
businessApp.supportedBybusinessApp.supportedBy
Use values within quotes or backticks to help you find business applications supported by.
Examples
Show any findings that contain parts of name
businessApp:(supportedBy:"John")
Show any findings that match exact value "John Doe"
businessApp:(supportedBy:`John Doe`)
businessApp.supportGroupbusinessApp.supportGroup
Use a text value ##### to help you find business applications with support group.
Example
Show assets with business application support group as Security
businessApp:(supportGroup: Security)
Supported Boolean Operators
The Qualys Query Language (QQL) supports the following logical or Boolean query operators. Use these operators in your queries to narrow down or broaden your search.
Narrow down your search by using the 'and' operator in your Boolean query. The result contains all the token values that you provide in your query.
Example
asset.status: Enrolled and asset.assetID: 122855563
The asset having the ID 122855563 and with status as Enrolled is returned in the result.
Narrow down your search by using the 'not' operator in your Boolean query. The result contains all the other values except the one that you specify after 'not' in your query.
Example
not tags.name: Windows
Assets with the Windows tag are excluded from search results.
Broaden your search by using the 'or' operator in your Boolean query. The result contains any of the token values that you provide in your query.
Example
tags.name:Cloud Agent or tags.name:Windows
The assets that have the Cloud Agent tag or the Windows tag are returned in the result.