Syntax help displayed in UI for tokens. Click each token to learn more about it.
Use these tokens when searching for business information assets in the tag creation wizard (Dynamic tag > Business Information rule).
Note:
- For all the date-related tokens, the date search is evaluated only for UTC format. The actual search results might show you the date as per your time zone.
- For the range searches, remember that the QQL search tokens are case-sensitive. Hence, make sure that you enter the correct token syntax. For more information, see Range Searches.
asset.supportGroupasset.supportGroup
Examples
Show any findings that contain parts of name
asset.supportGroup:"Compliance"
Show any findings that match exact value "Compliance Managers"
asset.supportGroup:`Compliance Managers`
asset.org.companyasset.org.company
Example
Show assets with company as Qualys
asset.org.company: Qualys
asset.org.departmentasset.org.department
Example
Show assets with department as Development
asset.org.department: Development
asset.operationalStatusasset.operationalStatus
Example
Show assets with operational status as Repair
asset.operationalStatus: Repair
asset.environmentasset.environment
Example
Show assets with environment as Production
asset.environment: Production
Examples
Show any findings that contain parts of name
asset.ownedBy:"Joey"
Show any findings that match exact value "Joey Bolick"
asset.ownedBy:`Joey Bolick`
asset.managedByasset.managedBy
Examples
Show any findings that contain parts of name
asset.managedBy:"Byron"
Show any findings that match exact value "Byron Fortuna"
asset.managedBy:`Byron Fortuna`
asset.supportedByasset.supportedBy
Examples
Show any findings that contain parts of name
asset.supportedBy:"John"
Show any findings that match exact value "John Doe"
asset.supportedBy:`John Doe`
asset.assignedLocation.nameasset.assignedLocation.name
Examples
Show any findings that contain parts of name
asset.assignedLocation.name:"401 Biscayne
St, Miami"
Show any findings that match exact value "401 Biscayne St, Miami FL"
asset.assignedLocation.name:`401 Biscayne St,
Miami FL`
asset.assignedLocation.cityasset.assignedLocation.city
Example
Show assets with assigned location city as Miami
asset.assignedLocation.city: Miami
asset.assignedLocation.stateasset.assignedLocation.state
Example
Show assets with assigned location state as FL
asset.assignedLocation.state: FL
asset.assignedLocation.countryasset.assignedLocation.country
Example
Show assets with assigned location country as USA
asset.assignedLocation.country: USA
businessApp.namebusinessApp.name
Examples
Show any findings that contain parts of name
businessApp:(name:"HR")
Show any findings that match exact value "HR Intranet"
businessApp:(name:`HR Intranet`)
Example
Show findings with business app ID as APP007
businessApp:(id:APP007)
businessApp.operationalStatusbusinessApp.operationalStatus
Example
Show business applications with operational status as Installed
businessApp:(operationalStatus: Installed)
businessApp.businessCriticalitybusinessApp.businessCriticality
Examples
Show any findings that contain parts of name
businessApp:(businessCriticality:"1 - most")
Show any findings that match exact value "1 - most critical"
businessApp:(businessCriticality:`1 - most critical`)
businessApp.environmentbusinessApp.environment
Example
Show assets with business application environment as Production
businessApp:(environment: Production)
businessApp.ownedBybusinessApp.ownedBy
Examples
Show any findings that contain parts of name
businessApp:(ownedBy:"Joey")
Show any findings that match exact value "Joey Bolick"
businessApp:(ownedBy:`Joey Bolick`)
businessApp.managedBybusinessApp.managedBy
Examples
Show any findings that contain parts of name
businessApp:(managedBy:"Byron")
Show any findings that match exact value "Byron Fortuna"
businessApp:(managedBy:`Byron Fortuna`)
businessApp.supportedBybusinessApp.supportedBy
Examples
Show any findings that contain parts of name
businessApp:(supportedBy:"John")
Show any findings that match exact value "John Doe"
businessApp:(supportedBy:`John Doe`)
businessApp.supportGroupbusinessApp.supportGroup
Example
Show assets with business application support group as Security
businessApp:(supportGroup: Security)
The Qualys Query Language (QQL) supports the following logical or Boolean query operators. Use these operators in your queries to narrow down or broaden your search.
Narrow down your search by using the 'and' operator in your Boolean query. The result contains all the token values that you provide in your query.
Example
asset.status: Enrolled and asset.assetID: 122855563
The asset having the ID 122855563 and with status as Enrolled is returned in the result.
Narrow down your search by using the 'not' operator in your Boolean query. The result contains all the other values except the one that you specify after 'not' in your query.
Example
not tags.name: Windows
Assets with the Windows tag are excluded from search results.
Broaden your search by using the 'or' operator in your Boolean query. The result contains any of the token values that you provide in your query.
Example
tags.name:Cloud Agent or tags.name:Windows
The assets that have the Cloud Agent tag or the Windows tag are returned in the result.