Search for Mac Job Results
Use the search tokens below to search for Mac job results. Looking for help with writing your query? click here
Use a text value ##### to find jobs applied to certain agent ID.
Example
Find jobs applied to this agent ID
agent.id: d5fc292b-857a-498f-ae01-4b9b24b27efa
Use values within quotes or backticks to find jobs applied to asset with certain name.
Example
Find jobs applied to asset with asset name
asset.name: FIN-VM
Use a text value ##### to find jobs applied to a certain asset type (Host, Container).
Example
Show jobs applied to this asset type
asset.type: "HOST"
job.endDateTimejob.endDateTime
Use a date range or specific date to find when jobs were last ended.
Examples
Show jobs ended within certain dates
job.endDateTime: [2018-02-01 ... 2018-02-12]
Show jobs ended with date starting 2018-02-01, ending 1 month ago
job.endDateTime: [2018-02-01 ... now-1M]
Show jobs ended with date starting 2 weeks ago, ending 1 second ago
job.endDateTime: [now-2w ... now-1s]
Show jobs ended on certain date
job.endDateTime:'2018-02-22'
job.failedPatchIdjob.failedPatchId
Use a text value ##### to find failed jobs by patch ID.
Example
Find failed jobs with this patch ID
job.failedPatchId: 34bf328c-53b1-397e-a468-36fa6f4da9d9
job.failedPatchReasonjob.failedPatchReason
Use values within quotes or backticks to find jobs with certain failed patch reason.
Examples
Find jobs related to failed patch reason
job.failedPatchReason: FileDownloadFailed
Find jobs that contain parts of failed patch reason
job.failedPatchReason: "FileDownloadFailed: Vendor patch file failed downloading. No installation will happen (Normally a terminal state)"
Find jobs that match exact value
job.failedPatchReason: `FileDownloadFailed: Vendor patch file failed downloading. No installation will happen (Normally a terminal state)`
job.failedPatchReasonCodejob.failedPatchReasonCode
Use a text value ##### to find jobs with certain failed patch reason code.
Example
Find jobs with this failed patch reason code
job.failedPatchReasonCode: 4
job.failedPatchTitlejob.failedPatchTitle
Use values within quotes or backticks to find failed jobs by patch title.
Examples
Find failed jobs related to patch title
job.failedPatchTitle: Security
Find failed jobs that contain parts of patch title
job.failedPatchTitle: "Security and Quality Rollup for the .Net Framework"
Find failed jobs that match exact value
job.failedPatchTitle: `Security for the .Net Framework`
job.alreadyInstalledPatchIdjob.alreadyInstalledPatchId
Use a text value ##### to jobs by ID of the installed patch.
Example
Find jobs with this patch ID
job.alreadyInstalledPatchId: 85f418ec-364c-306d-9ca1-d1058c294b05
job.alreadyInstalledPatchTitlejob.alreadyInstalledPatchTitle
Use values within quotes or backticks to find jobs by title of the installed patch.
Examples
Find jobs related to patch title
job.alreadyInstalledPatchTitle: Chrome
Find jobs that contain parts of patch title
job.alreadyInstalledPatchTitle: "Vulnerabilities in Windows Media Could Allow Remote Code Execution "
Find jobs that match exact value
job.alreadyInstalledPatchTitle: `Chrome 40.0.2214.91`
Use a text value ##### to find jobs by job ID.
Example
Find jobs with this ID
job.id: 24cf6cc3-a288-4d93-8d34-c28700e890ff
Use values within quotes or backticks to find jobs with certain job name.
Examples
Find jobs related to name
job.name: heartbeat
Find jobs that contain parts of name
job.name: "Patch for SSL heartbeat vulnerability"
Find jobs that match exact value
job.name: `heartbeat CVE-2014-0160`
Use a date range or specific date to find jobs that are sent to the agent by the specified date range or date.
Examples
Show jobs sent within certain dates
job.sentDate: [2020-07-01 ... 2020-07-30]
Show jobs sent on 2020-07-05, ending 1 month ago
job.sentDate: [2020-07-05 ... now-1M]
Show jobs sent on 2 weeks ago, ending 1 second ago
job.sentDate: [now-2w ... now-1s]
Show jobs sent on certain date
job.sentDate: '2020-07-01'
asset.lastLoggedOnUserasset.lastLoggedOnUser
Use a text value ##### to find jobs with the user that last logged in to the asset the job applies to.
Example
Find jobs with this last logged in user
asset.lastLoggedOnUser: .\Administrator
job.lastRebootTimejob.lastRebootTime
Use a date range or specific date to find jobs as per the last reboot time of the asset the job applies to.
Examples
Show jobs as per last asset reboot time within certain dates
job.lastRebootTime: [2018-02-01 ... 2018-02-12]
Show jobs as per last asset reboot time starting 2018-02-01, ending 1 month ago
job.lastRebootTime: [2018-02-01 ... now-1M]
Show jobs as per last asset reboot time starting 2 weeks ago, ending 1 second ago
job.lastRebootTime: [now-2w ... now-1s]
Show jobs as per last asset reboot time on certain date
job.lastRebootTime:'2018-02-22'
asset.netbiosNameasset.netbiosName
Use a text value ##### to find jobs by asset NetBIOS name.
Example
Find jobs applied to asset with this NETBIOS name
asset.netbiosName: 113080-T450
Use a text value ##### to find jobs applied to certain platform.
Example
Find jobs applied to Mac
job.platform: Mac
job.startDateTimejob.startDateTime
Use a date range or specific date to find when jobs were last started.
Examples
Show jobs started within certain dates
job.startDateTime: [2018-02-01 ... 2018-02-12]
Show jobs starting 2018-02-01, ending 1 month ago
job.startDateTime: [2018-02-01 ... now-1M]
Show jobs starting 2 weeks ago, ending 1 second ago
job.startDateTime: [now-2w ... now-1s]
Show jobs started on certain date
job.startDateTime: '2018-02-22'
Use a text value ##### to find jobs with a certain status (Downloading, Downloaded, Executing, Pending Reboot, Rebooted, Completed, Timed Out, Canceled - Blackout).
Example
Find jobs with this status
job.status: Completed
job.successPatchIdjob.successPatchId
Use a text value ##### to find successful jobs by patch ID.
Example
Find successful jobs with this patch ID
job.successPatchId: 34bf328c-53b1-397e-a468-36fa6f4da9d9
job.successPatchTitlejob.successPatchTitle
Use values within quotes or backticks to find successful jobs by patch title.
Examples
Find successful jobs related to patch title
job.successPatchTitle: Security
Find successful jobs that contain parts of patch title
job.successPatchTitle: "Security and Quality Rollup for the .Net Framework"
Find successful jobs that match exact value
job.successPatchTitle: `Security for the .Net Framework`
job.supersededPatchIdjob.supersededPatchId
Use a text value ##### to find jobs with patches that are superseded by certain patch (patch ID)
Example
Find jobs with patches that are superseded by this patch
job.supersededPatchId: 34bf328c-53b1-397e-a468-36fa6f4da9d9
job.supersededPatchTitlejob.supersededPatchTitle
Use values within quotes or backticks to find jobs with patches that are superseded by certain patch (patch title).
Examples
Find jobs with patches superseded by patch with title
job.supersededPatchTitle: Security
Find jobs with patches superseded by patches that contain parts of patch title
job.supersededPatchTitle: "Security Only Update for Windows 7 and 2008 R2: May 9, 2017"
Find jobs that match exact value
job.supersededPatchTitle: `Security Only Update for Windows 7`
asset.lastRebootDateasset.lastRebootDate
Use a date range or specific date to find jobs as per the last reboot time of the asset the job applies to.
Examples
Show jobs as per last asset reboot time within certain dates
asset.lastRebootDate: [2018-02-01 ... 2018-02-12]
Show jobs as per last asset reboot time starting 2018-02-01, ending 1 month ago
asset.lastRebootDate: [2018-02-01 ... now-1M]
Show jobs as per last asset reboot time starting 2 weeks ago, ending 1 second ago
systemLastReboote: [now-2w ... now-1s]
Show jobs as per last asset reboot time on certain date
asset.lastRebootDate:'2018-02-22'
Use a text value ##### to find jobs with the timezone of the asset the job applies to.
Example
Find jobs related to timezone
asset.timezone: "-08:00"
Use values within quotes or backticks to find jobs with the asset tag ID the job applies to.
Examples
Find jobs applied to asset tag ID
job.tag.id: 79eb654f-6eca-4922-9adf-0d39bd7cf3f2
Use values within quotes or backticks to find jobs with the asset tag name the job applies to.
Examples
Find jobs applied to asset tag name
job.tag.name: sanjose
Find jobs that contain parts of asset tag name
job.tag.name: "sanjose_mac"
Find jobs that match exact value
job.tag.name: `sanjose_mac`
Use values within quotes or backticks to find jobs by the model of the asset system the job applies to.
Examples
Find jobs related to model name
hardware.model: Mac13,1
Find jobs that contain parts of model name
hardware.model: "Mac13,1"
Find jobs that match exact value
hardware.model: `Mac13,1`
hardware.manufacturerhardware.manufacturer
Use values within quotes or backticks to find jobs by the manufacturer of the asset system the job applies to.
Examples
Find jobs related to manufacturer name
hardware.manufacturer: Apple Inc
Find jobs that contain parts of manufacturer name
hardware.manufacturer: "Apple Inc"
Find jobs that match exact value
hardware.manufacturer: `Apple Inc.`
asset.interface.addressasset.interface.address
Use values to find the IP addresses you are looking for.
Examples
Show the exact match of the IP address
asset.interface.address:`10.113.226.87`
Show any findings that contain parts of the IP address
asset.interface.address:"10.0"
asset.interface.address:10.0