Search for Windows Job Results
Use the search tokens below to search for Windows job results. Looking for help with writing your query? click here
Use a text value ##### to find jobs applied to certain agent ID.
Example
Find jobs applied to this agent ID
agentId: d5fc292b-857a-498f-ae01-4b9b24b27efa
Use values within quotes or backticks to find jobs applied to asset with certain name.
Example
Find jobs applied to asset with asset name
assetName: FIN-VM
Use a text value ##### to find jobs applied to a certain asset type (Host, Container).
Example
Show jobs applied to this asset type
assetType: "HOST"
Use a date range or specific date to find when jobs were last ended.
Examples
Show jobs ended within certain dates
endDateTime: [2018-02-01 ... 2018-02-12]
Show jobs ended with date starting 2018-02-01, ending 1 month ago
endDateTime: [2018-02-01 ... now-1M]
Show jobs ended with date starting 2 weeks ago, ending 1 second ago
endDateTime: [now-2w ... now-1s]
Show jobs ended on certain date
endDateTime:'2018-02-22'
Use a text value ##### to find failed jobs by patch ID.
Example
Find failed jobs with this patch ID
failedPatchId: 34bf328c-53b1-397e-a468-36fa6f4da9d9
failedPatchReasonfailedPatchReason
Use values within quotes or backticks to find jobs with certain failed patch reason.
Examples
Find jobs related to failed patch reason
failedPatchReason: FileDownloadFailed
Find jobs that contain parts of failed patch reason
failedPatchReason: "FileDownloadFailed: Vendor patch file failed downloading. No installation will happen (Normally a terminal state)"
Find jobs that match exact value
failedPatchReason: `FileDownloadFailed: Vendor patch file failed downloading. No installation will happen (Normally a terminal state)`
failedPatchReasonCodefailedPatchReasonCode
Use a text value ##### to find jobs with certain failed patch reason code.
Example
Find jobs with this failed patch reason code
failedPatchReasonCode: 4
failedPatchTitlefailedPatchTitle
Use values within quotes or backticks to find failed jobs by patch title.
Examples
Find failed jobs related to patch title
failedPatchTitle: Security
Find failed jobs that contain parts of patch title
failedPatchTitle: "Security and Quality Rollup for the .Net Framework"
Find failed jobs that match exact value
failedPatchTitle: `Security for the .Net Framework`
alreadyInstalledPatchIdalreadyInstalledPatchId
Use a text value ##### to jobs by ID of the installed patch.
Example
Find jobs with this patch ID
alreadyInstalledPatchId: 85f418ec-364c-306d-9ca1-d1058c294b05
alreadyInstalledPatchTitlealreadyInstalledPatchTitle
Use values within quotes or backticks to find jobs by title of the installed patch.
Examples
Find jobs related to patch title
alreadyInstalledPatchTitle: Chrome
Find jobs that contain parts of patch title
alreadyInstalledPatchTitle: "Vulnerabilities in Windows Media Could Allow Remote Code Execution "
Find jobs that match exact value
alreadyInstalledPatchTitle: `Chrome 40.0.2214.91`
Use a text value ##### to find jobs by job ID.
Example
Find jobs with this ID
jobId: 24cf6cc3-a288-4d93-8d34-c28700e890ff
Use values within quotes or backticks to find jobs with certain job name.
Examples
Find jobs related to name
JobName: heartbeat
Find jobs that contain parts of name
JobName: "Patch for SSL heartbeat vulnerability"
Find jobs that match exact value
JobName: `heartbeat CVE-2014-0160`
Use a date range or specific date to find jobs that are sent to the agent by the specified date range or date.
Examples
Show jobs sent within certain dates
jobSentOn: [2020-07-01 ... 2020-07-30]
Show jobs sent on 2020-07-05, ending 1 month ago
jobSentOn: [2020-07-05 ... now-1M]
Show jobs sent on 2 weeks ago, ending 1 second ago
jobSentOn: [now-2w ... now-1s]
Show jobs sent on certain date
jobSentOn: '2020-07-01'
lastLoggedOnUserlastLoggedOnUser
Use a text value ##### to find jobs with the user that last logged in to the asset the job applies to.
Example
Find jobs with this last logged in user
lastLoggedOnUser: .\Administrator
Use a date range or specific date to find jobs as per the last reboot time of the asset the job applies to.
Examples
Show jobs as per last asset reboot time within certain dates
lastRebootTime: [2018-02-01 ... 2018-02-12]
Show jobs as per last asset reboot time starting 2018-02-01, ending 1 month ago
lastRebootTime: [2018-02-01 ... now-1M]
Show jobs as per last asset reboot time starting 2 weeks ago, ending 1 second ago
lastRebootTime: [now-2w ... now-1s]
Show jobs as per last asset reboot time on certain date
lastRebootTime:'2018-02-22'
Use a text value ##### to find jobs by asset NetBIOS name.
Example
Find jobs applied to asset with this NETBIOS name
netbiosName: VISTASP2-24-208
Use a text value ##### to find jobs applied to certain platform.
Example
Find jobs applied to Windows
platform: Windows
Use a date range or specific date to find when jobs were last started.
Examples
Show jobs started within certain dates
startDateTime: [2018-02-01 ... 2018-02-12]
Show jobs starting 2018-02-01, ending 1 month ago
startDateTime: [2018-02-01 ... now-1M]
Show jobs starting 2 weeks ago, ending 1 second ago
startDateTime: [now-2w ... now-1s]
Show jobs started on certain date
startDateTime: '2018-02-22'
Use a text value ##### to find jobs with certain status (Downloading, Downloaded, Executing, Pending Reboot, Rebooted, Completed, Timed Out, Canceled - Blackout).
Example
Find jobs with this status
status: Completed
Use a text value ##### to find successful jobs by patch ID.
Example
Find successful jobs with this patch ID
successPatchId: 34bf328c-53b1-397e-a468-36fa6f4da9d9
successPatchTitlesuccessPatchTitle
Use values within quotes or backticks to find successful jobs by patch title.
Examples
Find successful jobs related to patch title
successPatchTitle: Security
Find successful jobs that contain parts of patch title
successPatchTitle: "Security and Quality Rollup for the .Net Framework"
Find successful jobs that match exact value
successPatchTitle: `Security for the .Net Framework`
supersededPatchIdsupersededPatchId
Use a text value ##### to find jobs with patches that are superseded by certain patch (patch ID)
Example
Find jobs with patches that are superseded by this patch
supersededPatchId: 34bf328c-53b1-397e-a468-36fa6f4da9d9
supersededPatchTitlesupersededPatchTitle
Use values within quotes or backticks to find jobs with patches that are superseded by certain patch (patch title).
Examples
Find jobs with patches superseded by patch with title
supersededPatchTitle: Security
Find jobs with patches superseded by patches that contain parts of patch title
supersededPatchTitle: "Security Only Update for Windows 7 and 2008 R2: May 9, 2017"
Find jobs that match exact value
supersededPatchTitle: `Security Only Update for Windows 7`
systemLastRebootsystemLastReboot
Use a date range or specific date to find jobs as per the last reboot time of the asset the job applies to.
Examples
Show jobs as per last asset reboot time within certain dates
systemLastReboot: [2018-02-01 ... 2018-02-12]
Show jobs as per last asset reboot time starting 2018-02-01, ending 1 month ago
systemLastReboot: [2018-02-01 ... now-1M]
Show jobs as per last asset reboot time starting 2 weeks ago, ending 1 second ago
systemLastReboote: [now-2w ... now-1s]
Show jobs as per last asset reboot time on certain date
systemLastReboot:'2018-02-22'
systemManufacturersystemManufacturer
Use values within quotes or backticks to find jobs by the manufacturer of the asset system the job applies to.
Examples
Find jobs related to manufacturer name
systemManufacturer: dell
Find jobs that contain parts of manufacturer name
systemManufacturer: "dell"
Find jobs that match exact value
systemManufacturer: `dell`
Use values within quotes or backticks to find jobs by the model of the asset system the job applies to.
Examples
Find jobs related to model name
systemModel: VMWare
Find jobs that contain parts of model name
systemModel: "VMWare Virtual Platform"
Find jobs that match exact value
systemModel: `VMware vSphere 4.0 ESXi`
Use a text value ##### to find jobs with the timezone of the asset the job applies to.
Example
Find jobs related to timezone
systemTimezone: "-08:00"
Use values within quotes or backticks to find jobs by the model of the asset system the job applies to.
Examples
Find jobs related to model name
systemModel: VMWare
Find jobs that contain parts of model name
systemModel: "VMWare Virtual Platform"
Find jobs that match exact value
systemModel: `VMware vSphere 4.0 ESXi`
systemManufacturersystemManufacturer
Use values within quotes or backticks to find jobs by the manufacturer of the asset system the job applies to.
Examples
Find jobs related to manufacturer name
systemManufacturer: VMware, Inc
Find jobs that contain parts of manufacturer name
systemManufacturer: "VMware, Inc"
Find jobs that match exact value
systemManufacturer: `VMware, Inc.`
interfaces.addressinterfaces.address
Use values to find the IP addresses you are looking for.
Examples
Show the exact match of the IP address
interfaces.address:`10.113.226.87`
Show any findings that contain parts of the IP address
interfaces.address:"10.0"
interfaces.address:10.0