Search tips for tokens

Syntax help displayed in UI for Asset tokens. A complete list of tokens for writing search queries is provided below.

and

Use text value ##### to search all assets that have the specified module activated.

Examples

Show all assets activated (provisioned) for PC module.

sensor.activatedForModules:PC and asset.name: host

asset.name

Use text value ##### to find an asset with this hostname.

Examples

Show findings with this asset hostname

asset.name:hostTandem

operatingSystem.name

Use text value ##### to search all assets that have the specified technology version. Note that the input is case sensitive and the value must be exactly same text as technology asset.name.

Examples

Show all assets with Cisco ACS 5 as their technology

operatingSystem.name:Cisco ACS 5

or

Use text value ##### to search all assets that have the specified module activated.

Examples

Show all assets activated (provisioned) for PC module.

sensor.activatedForModules:PC or asset.name: host

sensor.activatedForModules

Use text value ##### to search all assets that have the specified module activated.

Examples

Show all assets activated (provisioned)for PC module.

sensor.activatedForModules:PC

asset.interface.address

Use text value ##### to find assets having a IPv4 address you're interested in.

Examples

Show findings with this IP address

asset.interface.address:10.23.44.23

asset.createdDate

Use a date range or specific date to define when assets were created.

Examples

Show assets asset.createdDate within certain dates

asset.createdDate:[2018-01-01 ... 2018-01-10]

Show assets asset.createdDate starting 2017-10-01, ending 1 month ago

asset.createdDate:[2017-10-01 ... now-1M]

Show assets asset.createdDate starting 2 weeks ago, ending 1 second ago

asset.createdDate:[now-2w ... now-1s]

Show assets asset.createdDate on specific date

asset.createdDate:'2016-01-08'

asset.netbiosName

Use a text value ##### to find assets with NetBIOS asset.name you're interested in.

Examples

Show the asset with this asset.name

asset.netbiosName:netbios-test

not

Use text value ##### to search all assets that have the specified module activated.

Examples

Show all assets activated (provisioned) for PC module.

sensor.sensor.activatedForModules:PC

asset.interface.macAddress

Use a text value ##### to find assets with the MAC address you're interested in.

Example

Show the asset with this MAC address

asset.interface.macAddress:"00-14-22-01-23-45"

asset.tag.name

Use a text value ##### to specify the asset tag you’re interested in.

Example

Show assets that have this asset tag

asset.tag.name: OCA

asset.lastUpdatedDate

Use a date range or specific date to find assets defined by when the asset was last updated.

Examples

Show interfaces updated within certain dates

asset.lastUpdatedDate: [2018-01-01 ... 2018-01-10]

Show interfaces updated starting 2017-06-01, ending 3 months ago

asset.lastUpdatedDate: [2017-06-01 ... now-3M]

Show interfaces updated starting 2 weeks ago, ending 1 second ago

asset.lastUpdatedDate: [now-2w ... now-1s]

Show interfaces updated on a specific date

asset.lastUpdatedDate:'2016-01-08'