Search for Windows Patches and Assets
Use the search tokens below to search for patches. Looking for help with writing your query? click here
This is a non searchable file containing all tokens for Patches and Assets copied from the respective token files. Any updates to the Patches and Assets token files should be done here too. This file is used for the dual-search functionality on the UI for Patches and Assets.
Patch tokens
Use values within quotes or backticks to find patches belonging to certain applications.
Examples
Find patches for SQL Server
appFamily: SQL Server
Find patches that contain parts of the application name
appFamily: "SQL Server 2017 Express Edition"
Find patches that match exact value
appFamily: `SQL Server 2017`
Use a text value ##### to find patches applied to a certain architecture (x86, x64).
Example
Find patches for x64
architecture: x64
Use a text value ##### to find patches with certain bulletin name.
Example
Find patches related to bulletin
bulletin: MS-17-NET-04
Use a text value ##### to find patches of certain category (Security Patches, Software Distribution, Security Tools, Non-security Patches, Custom Actions).
Example
Show patches of category Security Patches
category: `Security Patches`
Use a text value ##### to find patches by certain CVE ID.
Example
Find patches for this CVE ID
cve: CVE-208-0760
Use a text value ##### to find patches by certain download method (Automatic, Unavailable, AcquireFromVendor).
- Automatic - Patch downloadable via the Cloud Agent (Qualys Patchable: Yes)
- AcquireFromVendor - Patch must be acquired from the vendor and installed manually (Qualys Patchable: No)
- Unavailable - Patch download information is not available (Qualys Patchable: No)
Example
Find unavailable patches
downloadMethod: unavailable
enabledVendorAcquiredPatchesenabledVendorAcquiredPatches
Use the values true | false to find vendor-acquired patches that are enabled
Example
Show vendor-acquired patches that are enabled
enabledVendorAcquiredPatches: true
Use the values true | false to find the Extended Security Update (ESU) patches.
Examples
Show a list of ESU patches.
isEsuPatch: true
Show a list of non-ESU patches.
isEsuPatch: false
Use the values true | false to find patches which are rolled back.
Example
Show rolled back patches
isRollback: true
Use the values true | false to find patches of type Security.
Example
Show security patches
isSecurity: true
Use a text value ##### to find patches with KB number issued by Microsoft for individual patch (Microsoft only).
Example
Find patches related to KB number
kb: KB401572
Use a date range or specific date to find when patches were last modified.
Examples
Show patches modified within certain dates
modifiedDate: [2018-02-01 ... 2018-02-12]
Show patches modified starting 2018-02-01, ending 1 month ago
modifiedDate: [2018-02-01 ... now-1M]
Show patches modified starting 2 weeks ago, ending 1 second ago
modifiedDate: [now-2w ... now-1s]
Show patches modified on certain date
modifiedDate:'2018-02-22'
Use a text value ##### to find patches by patch ID.
Example
Find patches with this ID
patchId: 8fc0797d-2c7b-3c08-8e7b-48c30585a702
Use values within quotes or backticks to find products affected by a patch.
Examples
Find products related to name
product: Internet Explorer
Find products that contain parts of name
product: "Update for Internet Explorer 11 for Windows 8.1;
Find products that match exact value
product: `Update for Internet Explorer 11 for Windows 8.1 for x64-based systems (KB2901549)`
Use a date range or specific date to find when patches were last published.
Examples
Show patches published within certain dates
publishedDate: [2018-02-01 ... 2018-02-12]
Show patches published starting 2018-02-01, ending 1 month ago
publishedDate: [2018-02-01 ... now-1M]
Show patches published starting 2 weeks ago, ending 1 second ago
publishedDate: [now-2w ... now-1s]
Show patches published on certain date
publishedDate:'2018-02-22'
Use a text value ##### to find patches by certain QID.
Example
Find patches for this QID
qid: 3015321
Use the values true | false to find patches that require reboot.
Example
Show patches where reboot is required
rebootRequired: true
Use a text value ##### to find patches that are superseded by other patch (patch ID).
Example
Find patches that are superseded by this patch
supersededBy: 8fc0797d-2c7b-3c08-8e7b-48c30585a702
Use a text value ##### to find patches that supersede other patch (patch ID).
Example
Find patches that supersede this patch
supersedes: 8fc0797d-2c7b-3c08-8e7b-48c30585a702
Use a text value ##### to find patches of certain type (OS, Application).
Example
Show patches of type Application
type: "Application"
Use values within quotes or backticks to find patches from a certain vendor.
Examples
Find patches related to vendor name
vendor: Microsoft
Find patches that contain parts of vendor name
vendor: "Microsoft Corporation"
Find patches that match exact value
vendor: `Microsoft`
Use a text value ##### to find patches with certain vendor assigned severity level (Critical, Important, Moderate, Low, None).
Example
Find patches with this vendor assigned severity level
vendorSeverity: Critical
Use values within quotes or backticks to find patches with certain title.
Examples
Find patches related to title
title: Security
Find patches that contain parts of title
title: "Security and Quality Rollup for the .Net Framework"
Find patches that match exact value
title: `Security for the .Net Framework`
Asset tokens
Use a text value ##### to find an agent with a certain ID.
Example
Show findings for this agent ID
agentId:f0c8e682-e9cc-4e7d-b92a-0c905d81ec74
activatedModulesactivatedModules
Use the values MTG | PM to find assets that are activated for the Patch Management or Mitigation module.
Examples
Show assets activated for the Mitigation module.
activatedModules: MTG
Show assets activated for the Patch Management module.
activatedModules: PM
Use an integer value ##### to help you find assets on the basis of number of installed patches.
Example
Show assets where number of installed patches is less than 50
installedCount < 50
lastLoggedOnUserlastLoggedOnUser
Use a text value ##### to help you find assets last logged into by a user of interest.
Examples
Show assets last logged into by this user
lastLoggedOnUser:.\Administrator
Use the values true | false to find assets that are using Patch Management licenses.
Example
Show assets licensed for Patch Management
licensed: true
Use an integer value ##### to help you find assets on the basis of number of missing patches.
Example
Show assets where number of missing patches is more than 50
missingCount > 50
Use a text value ##### to a specific asset name.
Example
Show findings with this asset name
name:WIN7PATCH69-85
Use a text value ##### to define the NetBIOS name you're interested in.
Examples
Show asset with this NetBIOS name
netbiosName:VISTASP2-24-208
Use a text value ##### to find assets on Windows, Linux, or Mac platforms.
Example
Show assets on Windows platform
platform:Windows
Use the values true | false to find assets that need a reboot.
Example
Show assets where reboot is pending
pendingReboot: true
Use a date range or specific date to define when assets were last scanned.
Examples
Show scan date within certain date range
scanDateTime:[2018-08-01 ... 2018-09-10]
Show scan date beginning 2018-06-15, ending 1 month ago
scanDateTime:[2018-06-15 ... now-1M]
Show scan date beginning 2 weeks ago, ending 1 second ago
scanDateTime:[now-2w ... now-1s]
Show scan date on a specific date
scanDateTime:'2018-09-12'
Use a date range or specific date to define when asset status was last updated.
Examples
Show status updated within certain date range
statusDateTime:[2018-08-01 ... 2018-09-10]
Show status updated beginning 2018-06-15, ending 1 month ago
statusDateTime:[2018-06-15 ... now-1M]
Show status updated beginning 2 weeks ago, ending 1 second ago
statusDateTime:[now-2w ... now-1s]
Show status updated on a specific date
statusDateTime:'2018-09-12'
Use a text value ##### to find assets with certain scan status returned from last scan.
Example
Show assets with this scan status
status:Enabled
systemLastRebootsystemLastReboot
Use a date range or specific date to define when assets were last rebooted.
Examples
Show assets last rebooted within certain dates
systemLastReboot:[2018-08-01 ... 2018-09-10]
Show assets last rebooted starting 2018-06-15, ending 1 month ago
systemLastReboot:[2018-06-15 ... now-1M]
Show assets last rebooted starting 2 weeks ago, ending 1 second ago
systemLastReboot:[now-2w ... now-1s]
Show assets last rebooted on a specific date
systemLastReboot:'2018-09-12'
Use a text value ##### to find assets in a certain timezone.
Example
Find assets in this timezone
systemTimezone:"-08:00"
interfaces.addressinterfaces.address
Use values to find the IP addresses you are looking for.
Examples
Show the exact match of the IP address
interfaces.address:`10.113.226.87`
Show any findings that contain parts of the IP address
interfaces.address:"10.0"
interfaces.address:10.0
Use values within quotes or backticks to find jobs by the model of the asset system the job applies to.
Examples
Find jobs related to model name
systemModel: VMWare
Find jobs that contain parts of model name
systemModel: "VMWare Virtual Platform"
Find jobs that match exact value
systemModel: `VMware vSphere 4.0 ESXi`
systemManufacturersystemManufacturer
Use values within quotes or backticks to find jobs by the manufacturer of the asset system the job applies to.
Examples
Find jobs related to manufacturer name
systemManufacturer: VMware, Inc
Find jobs that contain parts of manufacturer name
systemManufacturer: "VMware, Inc"
Find jobs that match exact value
systemManufacturer: `VMware, Inc.`