Search for Windows Assets
Use the search tokens below to search for Windows assets. Looking for help with writing your query? click here
Use a text value ##### to find an agent with a certain ID.
Example
Show findings for this agent ID
agent.id:f0c8e682-e9cc-4e7d-b92a-0c905d81ec74
sensor.activatedForModulessensor.activatedForModules
Use the values MTG | PM | ISL find assets that are activated for the Patch Management, Mitigation or Isolation module.
Examples
Show assets activated for the Mitigation module.
sensor.activatedForModules: MTG
Show assets activated for the Patch Management module.
sensor.activatedForModules: PM
Show assets activated for the Isolation module.
sensor.activatedForModules: ISL
asset.installedCountasset.installedCount
Use an integer value ##### to help you find assets on the basis of number of installed patches.
Example
Show assets where number of installed patches is less than 50
installedCount < 50
asset.lastLoggedOnUserasset.lastLoggedOnUser
Use a text value ##### to help you find assets last logged into by a user of interest.
Examples
Show assets last logged into by this user
asset.lastLoggedOnUser:.\Administrator
asset.isLicensedasset.isLicensed
Use the values true | false to find assets that are using Patch Management licenses.
Example
Show assets licensed for Patch Management
asset.isLicensed: true
asset.missingCountasset.missingCount
Use an integer value ##### to help you find assets on the basis of number of missing patches.
Example
Show assets where number of missing patches is more than 50
missingCount > 50
Use a text value ##### to a specific asset name.
Example
Show findings with this asset name
asset.name:WIN7PATCH69-85
asset.netbiosNameasset.netbiosName
Use a text value ##### to define the NetBIOS name you're interested in.
Examples
Show asset with this NetBIOS name
asset.netbiosName:VISTASP2-24-208
Use a text value ##### to find assets on Windows, Linux, or Mac platforms.
Example
Show assets on Windows platform
job.platform:Windows
asset.isPendingRebootasset.isPendingReboot
Use the values true | false to find assets that need a reboot. If the pendingReboot flag is set to true for an asset, then the agent machine requires a reboot post a deployment job. After the asset reboots, the pendingReboot flag is reset to false.
Example
Show assets where reboot is pending
asset.isPendingReboot: true
asset.scanDateTimeasset.scanDateTime
Use a date range or specific date to define when assets were last scanned.
Examples
Show scan date within certain date range
asset.scanDateTime:[2018-08-01 ... 2018-09-10]
Show scan date beginning 2018-06-15, ending 1 month ago
asset.scanDateTime:[2018-06-15 ... now-1M]
Show scan date beginning 2 weeks ago, ending 1 second ago
asset.scanDateTime:[now-2w ... now-1s]
Show scan date on a specific date
asset.scanDateTime:'2018-09-12'
asset.statusDateTimeasset.statusDateTime
Use a date range or specific date to define when asset status was last updated.
Examples
Show status updated within certain date range
asset.statusDateTime:[2018-08-01 ... 2018-09-10]
Show status updated beginning 2018-06-15, ending 1 month ago
asset.scanDateTime:[2018-06-15 ... now-1M]
Show status updated beginning 2 weeks ago, ending 1 second ago
asset.scanDateTime:[now-2w ... now-1s]
Show status updated on a specific date
asset.scanDateTime:'2018-09-12'
Use a text value ##### to find assets with certain scan status returned from last scan.
Example
Show assets with this scan status
asset.status:Enabled
asset.lastRebootDateasset.lastRebootDate
Use a date range or specific date to define when assets were last rebooted.
Examples
Show assets last rebooted within certain dates
asset.lastRebootDate:[2018-08-01 ... 2018-09-10]
Show assets last rebooted starting 2018-06-15, ending 1 month ago
asset.lastRebootDate:[2018-06-15 ... now-1M]
Show assets last rebooted starting 2 weeks ago, ending 1 second ago
asset.lastRebootDate:[now-2w ... now-1s]
Show assets last rebooted on a specific date
asset.lastRebootDate:'2018-09-12'
Use a text value ##### to find assets in a certain timezone.
Example
Find assets in this timezone
asset.timezone:"-08:00"
Use a text value ##### to find an asset tag ID.
Examples
Find patches that match exact value
asset.tag.id:`79eb654f-6eca-4922-9adf-0d39bd7cf3f2`
Use values within quotes or backticks to help you find the asset tag name you're looking for.
Examples
Show any findings related to this tag name
asset.tag.name:Cloud Agent
Show any findings that contain parts of tag name
asset.tag.name:"Cloud Agent"
Show any findings that match exact value "Cloud Agent"
asset.tag.name:`Cloud Agent`
asset.interface.addressasset.interface.address
Use values to find the IP addresses you are looking for.
Examples
Show the exact match of the IP address
asset.interface.address:`10.113.226.87`
Show any findings that contain parts of the IP address
asset.interface.address:"10.0"
asset.interface.address:10.0
Use values within quotes or backticks to find jobs by the model of the asset system the job applies to.
Examples
Find jobs related to model name
hardware.model: VMWare
Find jobs that contain parts of model name
hardware.model: "VMWare Virtual Platform"
Find jobs that match exact value
hardware.model: `VMware vSphere 4.0 ESXi`
hardware.manufacturerhardware.manufacturer
Use values within quotes or backticks to find jobs by the manufacturer of the asset system the job applies to.
Examples
Find jobs related to manufacturer name
hardware.manufacturer: VMware, Inc
Find jobs that contain parts of manufacturer name
hardware.manufacturer: "VMware, Inc"
Find jobs that match exact value
hardware.manufacturer: `VMware, Inc.`