To search for dates you'll use a date range [start date .. end date] or a specific date. Several date variables are available. Learn more
Find systems that were last booted between 1-2 months ago
system.lastBoot: [now-2M .. now-1M]
Find assets with vulnerabilities first found between January 1st and April 1st 2015
vulnerabilities.firstFound: [2015-01-01 .. 2015-04-01]
Find assets with vulnerabilities last found between 10 days ago and 1 second ago
vulnerabilities.lastFound: [now-10d .. now-1s]
Find assets with vulnerabilities published between 2015-10-01 and 2015-10-03
vulnerabilities.vulnerability.published: [2015-10-01
.. 2015-10-03]
Find assets with vulnerabilities published on February 1st 2016
vulnerabilities.vulnerability.published: '2016-02-01'
Find assets with vulnerabilities first found on February 1st 2016 at time 10:53:49
vulnerabilities.firstfound: "2016-02-01 10:53:49"
Find assets with vulnerabilities first found between January 1st and April 1st 2015
vulnerabilities.firstFound: [2015-01-01 .. 2015-04-01]
Type now- then a number and a time unit.
y (year), M (month), w (week), d (day), h (hour), m (minute), s (second)
Examples:
now-1y for 1 year ago
now-2M for 2 months ago
now-5d for 5 days ago
Examples:
vulnerabilities.vulnerability.published > 2016-03-12
vulnerabilities.vulnerability.published >= 2016-03-12
vulnerabilities.vulnerability.published < 2016-03-12
vulnerabilities.vulnerability.published <= 2016-03-12
We support yyyy, yyyy-MM, yyyy-MM-dd and more. Learn more
Example:
Find assets with last check-in during the year 2016
lastCheckedIn: "2016"