Old and New Search Token Mapping
The token standardization for the Qualys Query Language (QQL) search tokens follows a standard naming convention.
The new token format follows the syntax: entity.attribute
For example, in the new token, script.name, script is the entity, and name is the attribute.
- Only new tokens are displayed in the auto-suggestion in the search bars within the UI. However, if you type the old token name manually, the QQL query still works. Old token name visibility from the UI is removed.
- The existing Dashboard widgets and Saved Search Queries will continue to support the old tokens. You can edit search queries and widgets to update the new tokens.
Findings Tokens
| Old Token Name | New Token Name |
|---|---|
finding.firstFound |
finding.firstFoundDate |
finding.lastFound |
finding.lastFoundDate |
finding.ingestedOn |
finding.ingestedDate |
finding.reopened |
finding.reopenedDate |
Asset Tokens
| Old Token Name | New Token Name |
|---|---|
asset.lastLocation |
asset.lastLocation.name |
asset.lastUpdated |
asset.lastUpdatedDate |
businessApp:(businessCriticality |
businessApp.businessCriticality |
businessApp:(environment |
businessApp.environment |
businessApp:(id |
businessApp.id |
businessApp:(managedBy |
businessApp.managedBy.username |
businessApp:(name |
businessApp.name |
businessApp:(operationalStatus |
businessApp.operationalStatus |
businessApp:(ownedBy |
businessApp.ownedBy.username |
businessApp:(supportGroup |
businessApp.supportGroup |
businessApp:(supportedBy |
businessApp.supportedBy.username |
sensors.activatedForModules |
sensor.activatedForModules |
interfaces:(address |
asset.interface.address |
interfaces:(dnsAddress |
asset.interface.dnsAddress |
interfaces:(gatewayAddress |
asset.interface.gatewayAddress |
interfaces:(hostname |
asset.interface.hostname |
interfaces:(interfaceName |
asset.interface.name |
interfaces:(macAddress |
asset.interface.macAddress |
interfaces:(manufacturer |
asset.interface.manufacturer |
interfaces:(netmask |
asset.interface.netmask |
agent.agentID |
agent.id |
agent.lastInventory |
agent.lastInventoryDate |
agent.lastActivity |
agent.lastActivityDate |
agent.udcManifestAssigned |
agent.isUdcManifestAssigned |
alibaba.instance.region.code |
alibaba.instance.regionCode |
alibaba.instance.region.name |
alibaba.instance.regionName |
alibaba.instance.region.code |
alibaba.instance.regionCode |
alibaba.instance.region.name |
alibaba.instance.regionName |
inventory:(created |
asset.inventory.createdDate |
inventory:(lastUpdated |
asset.inventory.lastUpdatedDate |
inventory:(source |
asset.inventory.source |
hardware |
hardware.name |
asset.assetID |
asset.id |
asset.created |
asset.createdDate |
accounts.username |
account.username |
asset:(org.company |
asset.org.company |
aws.tags |
aws.tag |
aws.tags:(key |
aws.tag:(key |
aws.tags:(value |
aws.tag:(value |
connectors.connector.name |
connector.name |
connectors.connectorId |
connector.id |
connectors.firstDiscovered |
connector.firstFoundDate |
connectors.lastDiscovered |
connector.lastFoundDate |
customAttributes:(connectorId |
customAttributes.connectorId |
customAttributes:(key |
customAttributes.key |
customAttributes:(value |
customAttributes.value |
easm.tags.name |
easm.tag.name |
ibm.tags:(name |
ibm.tag.name |
ibm.tags:(value |
ibm.tag.value |
middlewareManifestVersion |
asset.middlewareManifestVersion |
pcManifestVersion |
asset.pcManifestVersion |
scaManifestVersion |
asset.scaManifestVersion |
qualysCorrelationID |
agent.qualysCorrelationId |
udcManifestVersion |
asset.udcManifestVersion |
vmManifestVersion |
asset.vmManifestVersion |
oci.compute.ociId |
oci.compute.id |
oci.tags:(key |
oci.tag.key |
oci.tags:(namespace |
oci.tag.namespace |
oci.tags:(type |
oci.tag.type |
oci.tags:(value |
oci.tag.value |
oci.vnic:(macAddr |
oci.vnic.macAddr |
oci.vnic:(nicIndex |
oci.vnic.nicIndex |
oci.vnic:(privateIp |
oci.vnic.privateIp |
oci.vnic:(publicIp |
oci.vnic.publicIp |
oci.vnic:(subnetCidrBlock |
oci.vnic.subnetCidrBlock |
oci.vnic:(subnetId |
oci.vnic.subnetId |
oci.vnic:(subnetName |
oci.vnic.subnetName |
oci.vnic:(vcnId |
oci.vnic.vcnId |
oci.vnic:(vcnName |
oci.vnic.vcnName |
oci.vnic:(virtualRouterIp |
oci.vnic.virtualRouterIp |
oci.vnic:(vlanTag |
oci.vnic.vlanTag |
oci.vnic:(vnicId |
oci.vnic.vnicId |
openPorts.port |
openPorts:(port |
passiveSensor.lastUpdated |
passiveSensor.lastUpdatedDate |
processors |
processor.name |
processors.coresPerSocket |
processor.coresPerSocket |
processors.multithreadingStatus |
processor.multiThreadingStatus |
processors.numberOfCpu |
processor.noOfCpu |
processors.numberOfSockets |
processor.noOfSockets |
processors.speed |
processor.speed |
processors.threadsPerCore |
processor.threadsPerCore |
sensors.firstEasmScanDate |
sensor.firstEasmScanDate |
sensors.firstEasmVmScanDate |
sensor.firstEasmVmScanDate |
sensors.lastComplianceScan |
sensor.lastComplianceScanDate |
sensors.lastEasmScanDate |
sensor.lastEasmScanDate |
sensors.lastEasmVmScanDate |
sensor.lastEasmVmScanDate |
sensors.lastFullScan |
sensor.lastFullScanDate |
sensors.lastPcScanDateAgent |
sensor.lastPcAgentScanDate |
sensors.lastPcScanDateScanner |
sensor.lastPcScannerScanDate |
sensors.lastVmScan |
sensor.lastVmScanDate |
sensors.lastVmScanDateAgent |
sensor.lastVmAgentScanDate |
sensors.lastVmScanDateScanner |
sensor.lastVmScannerScanDate |
sensors.pendingActivationForModules |
sensor.pendingActivationForModules |
services:(description |
service.description |
services:(name |
service.name |
services:(status |
service.status |
software:(architecture |
software.architecture |
software:(authorization |
software.authorization |
software:(authorizationDetectionScore |
software.authorizationDetectionScore |
software:(category |
software.category |
software:(category1 |
software.category1 |
software:(category2 |
software.category2 |
software:(component |
software.component |
software:(discoverySources |
software.discoverySources |
software:(edition |
software.edition |
software:(firstFound |
software.firstFoundDate |
software:(hasRunningInstance |
software.hasRunningInstance |
software:(installDate |
software.installDate |
software:(isPCSupported |
software.isPCSupported |
software:(isPackage |
software.isPackage |
software:(isPackageComponent |
software.isPackageComponent |
software:(isRequired |
software.isRequired |
software:(lastUpdated |
software.lastUpdatedDate |
software:(license.category |
software.license.category |
software:(license.subcategory |
software.license.subcategory |
software:(lifecycle.detectionScore |
software.lifecycle.detectionScore |
software:(lifecycle.eol |
software.lifecycle.eol |
software:(lifecycle.eos |
software.lifecycle.eos |
software:(lifecycle.ga |
software.lifecycle.ga |
software:(lifecycle.stage |
software.lifecycle.stage |
software:(marketVersion |
software.marketVersion |
software:(name |
software.name |
software:(product |
software.product |
software:(publisher |
software.publisher |
software:(supportStage |
software.supportStage |
software:(version |
software.version |
software:(installPath |
software.installPath |
tags.name |
asset.tag.name |
whoIs:(creationDate |
whoIs:(createdDate |
asset:(domain |
asset.domain |
asset:(isp |
asset.isp |
asset.lastBoot |
asset.lastBootDate |
asset.ownedBy |
asset.ownedBy.username |
asset.supportedBy |
asset.supportedBy.username |
asset.supportGroup |
asset.supportGroupasset.supportGroup |
asset.managedBy |
asset.managedBy.username |