Search for Windows Patches and Assets
Use the search tokens below to search for patches. Looking for help with writing your query? click here
This is a non searchable file containing all tokens for Patches and Assets copied from the respective token files. Any updates to the Patches and Assets token files should be done here too. This file is used for the dual-search functionality on the UI for Patches and Assets.
Patch tokens
patch.appFamilypatch.appFamily
Use values within quotes or backticks to find patches belonging to certain applications.
Examples
Find patches for SQL Server
patch.appFamily: SQL Server
Find patches that contain parts of the application name
patch.appFamily: "SQL Server 2017 Express Edition"
Find patches that match exact value
patch.appFamily: `SQL Server 2017`
patch.architecturepatch.architecture
Use a text value ##### to find patches applied to a certain architecture (x86, x64).
Example
Find patches for x64
patch.architecture: x64
Use a text value ##### to find patches with certain bulletin name.
Example
Find patches related to bulletin
patch.bulletin: MS-17-NET-04
Use a text value ##### to find patches of certain category (Security Patches, Software Distribution, Security Tools, Non-security Patches, Custom Actions).
Example
Show patches of category Security Patches
patch.category: `Security Patches`
Use a text value ##### to find patches by certain CVE ID.
Example
Find patches for this CVE ID
patch.cveId: CVE-208-0760
patch.downloadMethodpatch.downloadMethod
Use a text value ##### to find patches by certain download method (Automatic, Unavailable, AcquireFromVendor).
- Automatic - Patch downloadable via the Cloud Agent (Qualys Patchable: Yes)
- AcquireFromVendor - Patch must be acquired from the vendor and installed manually (Qualys Patchable: No)
- Unavailable - Patch download information is not available (Qualys Patchable: No)
Example
Find unavailable patches
patch.downloadMethod: unavailable
patch.isEnabledVendorAcquiredPatchespatch.isEnabledVendorAcquiredPatches
Use the values true | false to find vendor-acquired patches that are enabled
Example
Show vendor-acquired patches that are enabled
patch.isEnabledVendorAcquiredPatches: true
patch.isEsuPatchpatch.isEsuPatch
Use the values true | false to find the Extended Security Update (ESU) patches.
Examples
Show a list of ESU patches.
patch.isEsuPatch: true
Show a list of non-ESU patches.
patch.isEsuPatch: false
patch.isRollbackpatch.isRollback
Use the values true | false to find patches which are rolled back.
Example
Show rolled back patches
patch.isRollback: true
patch.isSecuritypatch.isSecurity
Use the values true | false to find patches of type Security.
Example
Show security patches
patch.isSecurity: true
Use a text value ##### to find patches with KB number issued by Microsoft for individual patch (Microsoft only).
Example
Find patches related to KB number
patch.kb: KB401572
patch.updatedDatepatch.updatedDate
Use a date range or specific date to find when patches were last modified.
Examples
Show patches modified within certain dates
patch.updatedDate: [2018-02-01 ... 2018-02-12]
Show patches modified starting 2018-02-01, ending 1 month ago
patch.updatedDate: [2018-02-01 ... now-1M]
Show patches modified starting 2 weeks ago, ending 1 second ago
patch.updatedDate: [now-2w ... now-1s]
Show patches modified on certain date
patch.updatedDate:'2018-02-22'
Use a text value ##### to find patches by patch ID.
Example
Find patches with this ID
patch.id: 8fc0797d-2c7b-3c08-8e7b-48c30585a702
Use values within quotes or backticks to find products affected by a patch.
Examples
Find products related to name
patch.product: Internet Explorer
Find products that contain parts of name
patch.product: "Update for Internet Explorer 11 for Windows 8.1;
Find products that match exact value
patch.product: `Update for Internet Explorer 11 for Windows 8.1 for x64-based systems (KB2901549)`
patch.publishedDatepatch.publishedDate
Use a date range or specific date to find when patches were last published.
Examples
Show patches published within certain dates
patch.publishedDate: [2018-02-01 ... 2018-02-12]
Show patches published starting 2018-02-01, ending 1 month ago
patch.publishedDate: [2018-02-01 ... now-1M]
Show patches published starting 2 weeks ago, ending 1 second ago
patch.publishedDate: [now-2w ... now-1s]
Show patches published on certain date
patch.publishedDate:'2018-02-22'
Use a text value ##### to find patches by certain QID.
Example
Find patches for this QID
patch.qid: 3015321
patch.isRebootRequiredpatch.isRebootRequired
Use the values true | false to find patches that require reboot.
Example
Show patches where reboot is required
patch.isRebootRequired: true
patch.supersededBypatch.supersededBy
Use a text value ##### to find patches that are superseded by other patch (patch ID).
Example
Find patches that are superseded by this patch
patch.supersededBy: 8fc0797d-2c7b-3c08-8e7b-48c30585a702
patch.supersedespatch.supersedes
Use a text value ##### to find patches that supersede other patch (patch ID).
Example
Find patches that supersede this patch
patch.supersedes: 8fc0797d-2c7b-3c08-8e7b-48c30585a702
Use a text value ##### to find patches of certain type (OS, Application).
Example
Show patches of type Application
patch.type: "Application"
Use values within quotes or backticks to find patches from a certain vendor.
Examples
Find patches related to vendor name
patch.vendor: Microsoft
Find patches that contain parts of vendor name
patch.vendor: "Microsoft Corporation"
Find patches that match exact value
patch.vendor: `Microsoft`
patch.vendorSeveritypatch.vendorSeverity
Use a text value ##### to find patches with certain vendor assigned severity level (Critical, Important, Moderate, Low, None).
Example
Find patches with this vendor assigned severity level
patch.vendorSeverity: Critical
Use values within quotes or backticks to find patches with certain title.
Examples
Find patches related to title
patch.title: Security
Find patches that contain parts of title
patch.title: "Security and Quality Rollup for the .Net Framework"
Find patches that match exact value
patch.title: `Security for the .Net Framework`
Asset tokens
Use a text value ##### to find an agent with a certain ID.
Example
Show findings for this agent ID
agent.id:f0c8e682-e9cc-4e7d-b92a-0c905d81ec74
sensor.activatedForModulessensor.activatedForModules
Use the values MTG | PM | ISL to find assets that are activated for the Patch Management, Mitigation or Isolation module.
Examples
Show assets activated for the Mitigation module.
sensor.activatedForModules: MTG
Show assets activated for the Patch Management module.
sensor.activatedForModules: PM
Show assets activated for the Isolation module.
sensor.activatedForModules: ISL
asset.isIsolatedasset.isIsolated
Use the value True or False to find the isolated and non-isolated assets.
Examples
Show assets that are isolated
asset.isIsolated: true
Show assets that are not isolated
asset.isIsolated: false
asset.installedCountasset.installedCount
Use an integer value ##### to help you find assets on the basis of number of installed patches.
Example
Show assets where number of installed patches is less than 50
asset.installedCount < 50
asset.lastLoggedOnUserasset.lastLoggedOnUser
Use a text value ##### to help you find assets last logged into by a user of interest.
Examples
Show assets last logged into by this user
asset.lastLoggedOnUser:.\Administrator
asset.isLicensedasset.isLicensed
Use the values true | false to find assets that are using Patch Management licenses.
Example
Show assets licensed for Patch Management
asset.isLicensed: true
asset.missingCountasset.missingCount
Use an integer value ##### to help you find assets on the basis of number of missing patches.
Example
Show assets where number of missing patches is more than 50
missingCount > 50
Use a text value ##### to a specific asset name.
Example
Show findings with this asset name
asset.name:WIN7PATCH69-85
asset.netbiosNameasset.netbiosName
Use a text value ##### to define the NetBIOS name you're interested in.
Examples
Show asset with this NetBIOS name
asset.netbiosName:VISTASP2-24-208
asset.isPendingRebootasset.isPendingReboot
Use the values true | false to find assets that need a reboot.
Example
Show assets where reboot is pending
asset.isPendingReboot: true
asset.scanDateTimeasset.scanDateTime
Use a date range or specific date to define when assets were last scanned.
Examples
Show scan date within certain date range
asset.scanDateTime:[2018-08-01 ... 2018-09-10]
Show scan date beginning 2018-06-15, ending 1 month ago
asset.scanDateTime:[2018-06-15 ... now-1M]
Show scan date beginning 2 weeks ago, ending 1 second ago
asset.scanDateTime:[now-2w ... now-1s]
Show scan date on a specific date
asset.scanDateTime:'2018-09-12'
asset.statusDateTimeasset.statusDateTime
Use a date range or specific date to define when asset status was last updated.
Examples
Show status updated within certain date range
asset.statusDateTime:[2018-08-01 ... 2018-09-10]
Show status updated beginning 2018-06-15, ending 1 month ago
asset.statusDateTime:[2018-06-15 ... now-1M]
Show status updated beginning 2 weeks ago, ending 1 second ago
asset.statusDateTime:[now-2w ... now-1s]
Show status updated on a specific date
asset.statusDateTime:'2018-09-12'
Use a text value ##### to find assets with certain scan status returned from last scan.
Example
Show assets with this scan status
asset.status:Enabled
asset.lastRebootDateasset.lastRebootDate
Use a date range or specific date to define when assets were last rebooted.
Examples
Show assets last rebooted within certain dates
asset.lastRebootDate:[2018-08-01 ... 2018-09-10]
Show assets last rebooted starting 2018-06-15, ending 1 month ago
asset.lastRebootDate:[2018-06-15 ... now-1M]
Show assets last rebooted starting 2 weeks ago, ending 1 second ago
asset.lastRebootDate:[now-2w ... now-1s]
Show assets last rebooted on a specific date
asset.lastRebootDate:'2018-09-12'
Use a text value ##### to find assets in a certain timezone.
Example
Find assets in this timezone
asset.timezone:"-08:00"
Use a text value ##### to find an asset tag ID.
Examples
Find patches that match exact value
asset.tag.id:`79eb654f-6eca-4922-9adf-0d39bd7cf3f2`
Use values within quotes or backticks to help you find the asset tag name you're looking for.
Examples
Show any findings related to this tag name
asset.tag.name:Cloud Agent
Show any findings that contain parts of tag name
asset.tag.name:"Cloud Agent"
Show any findings that match exact value "Cloud Agent"
asset.tag.name:`Cloud Agent`
asset.interface.addressasset.interface.address
Use values to find the IP addresses you are looking for.
Examples
Show the exact match of the IP address
asset.interface.address:`10.113.226.87`
Show any findings that contain parts of the IP address
asset.interface.address:"10.0"
asset.interface.address:10.0
Use values within quotes or backticks to find jobs by the model of the asset system the job applies to.
Examples
Find jobs related to model name
hardware.model: VMWare
Find jobs that contain parts of model name
hardware.model: "VMWare Virtual Platform"
Find jobs that match exact value
hardware.model: `VMware vSphere 4.0 ESXi`
hardware.manufacturerhardware.manufacturer
Use values within quotes or backticks to find jobs by the manufacturer of the asset system the job applies to.
Examples
Find jobs related to manufacturer name
hardware.manufacturer: VMware, Inc
Find jobs that contain parts of manufacturer name
hardware.manufacturer: "VMware, Inc"
Find jobs that match exact value
hardware.manufacturer: `VMware, Inc.`