Search Tokens for GCP Assets

Syntax help displayed in UI for tokens. Click each token to learn more about it.

Use these tokens when searching your Google Cloud Platform assets in the tag creation wizard (Dynamic tag > Cloud Asset Search rule).

Note:

- For all the date-related tokens, the date search is evaluated only for UTC format. The actual search results might show you the date as per your time zone.

- For the range searches, remember that the QQL search tokens are case-sensitive. Hence, make sure that you enter the correct token syntax. For more information, see Range Searches.

gcp.compute.hostname

gcp.compute.instanceId

gcp.compute.imageId

gcp.compute.macAddress

gcp.compute.machineType

gcp.compute.network

gcp.compute.privateIpAddress

gcp.compute.projectId

gcp.compute.projectNumber

gcp.compute.publicIpAddress

Supported Boolean Operators

The Qualys Query Language (QQL) supports the following logical or Boolean query operators. Use these operators in your queries to narrow down or broaden your search.

and

not

Search Tokens for GCP Assets

Use a text value ##### to define the hostname you're looking for.

Use a text value ##### to define the Google Compute instance ID you're looking for.

Use a text value ##### to define the Google Compute image ID you're looking for.

Use a text value ##### to define the MAC address you're interested in.

Use a text value ##### to define the machine type of the virtual machine instance you're interested in.

Use a text value ##### to find GCP instances by the VPC network the instance belongs to.

Use a text value ##### to define a private IPv4 address or range of IPs you're interested in.

Use a text value ##### to define the project ID assigned to the GCP Console project the instance belongs to.

Use an integer value ##### to define the project number assigned to the GCP Console project the instance belongs to.

Use a text value ##### to define a public IPv4 address or range of IPs you're interested in.

Use a text value ##### to define the zone of the GCP instance you're looking for

Use the values true | false to define whether the GCP instances you're looking for has a cloud agent installed on it.

Use a text value ##### to find VM instances with a certain GCP labels name (case insensitive).

Use a text value ##### to find VM instances with a certain GCP labels value (case insensitive).

Supported Boolean Operators