Search Tokens for Scans and Models
Syntax help displayed in UI for tokens. Click each token to learn more about it.
Note:
- For all the date-related tokens, the date search is evaluated only for UTC format. The actual search results might show you the date as per your time zone.
- For the range searches, remember that the QQL search tokens are case-sensitive. Hence, make sure that you enter the correct token syntax. For more information, see Range Searches.
- While using the nested QQL queries for software-related tokens using the 'not' operator and multiple values in [], the placement of 'not' is very important. Make sure to enter the correct token syntax. Otherwise, you will not get the expected results. For more information, see the Nested Queries section from the How to Search topic.
Scans Tokens
Select a severity value to find scans with selected scan severity: HIGH, LOW, MEDIUM, NONE.
Example
Find scans with the specified scan severity LOW
scan.severity: LOW
Use values within quotes or backticks to find scans with the specified scan name.
Examples
Find scans that contain a part of the given name
scan.name: "TestScan"
Find scans with the given name
scan.name: `TestScan`
Use an integer value to find scans with the given scan ID.
Example
Find the scan with the given ID
scan.id: 30
Select status to find scans with selected scan status - ERROR, FINISHED, NO_HOST_ALIVE, PROCESSING, RUNNING, SCANNER_NOT_AVAILABLE, SUBMITTED.
Example
Find scans with the FINISHED status
scan.status: FINISHED
Model Tokens
Use values within quotes or backticks to search models with the specified name.
Examples
Show any findings that match the beginning of any substrings within the model name
asset.name:"Llama for Ecommerce App"
Show any findings that match specified model name
asset.name:`Llama for Ecommerce App`
Use a an integer value to find models with the specified model ID.
Example
Find models with the ID 123
asset.id: 123
Select a value to find models in the selected environment - Hugging Face, AWS Bedrock, Azure AI, Google Vertex.
Example
Find models in the Azure AI platform
model.runtime: Azure AI
model.lastScannedmodel.lastScanned
Use a date range or specific date to find models that were last scanned on the specified date or date range.
Examples
Find models which were last scanned in past 6 months
model.lastScanned: [now-6M .. now]
Find models which were last scanned on a specified date.
model.lastScanned: "2024-10-20"
Find models which were were last scanned after a specified date.
model.lastScanned> "2021-07-20"
model.lastScanStatusmodel.lastScanStatus
Select a status from the list to find model with the specified last scanned status - ERROR, FINISHED, NO_HOST_ALIVE, PROCESSING, RUNNING, SCANNER_NOT_AVAILABLE, SUBMITTED. Note: Use the single quotation marks for the values containing reserver characters - NOT. For example, 'SCANNER NOT AVAILABLE'.
Examples
Find models whose last scan status was ERROR
model.lastScanStatus: ERROR
Find models whose last scan status was SCANNER NOT AVAILABLE
model.lastScanStatus: 'SCANNER NOT AVAILABLE'
Find models whose last scan status was either SUBMITTED or PROCESSING
model.lastScanStatus: [SUBMITTED, PROCESSING]
Use a string value to find models with the specified model ID.
Examples
Find models that contain parts of given model ID.
model.modelId: "123"
Find models with the specified model ID.
model.modelId: `123`
Use a text value within quotes ot backticks to find models with the specified URL.
Examples
Find models that contains the part of given URL.
model.url:"abc.com"
Find models that with the specified URL.
model.url:`abc.com`
model.totalVulnCountmodel.totalVulnCount
Use an integer value to find models with the specified detection count.
Examples
Find models with the detection count 30.
model.totalVulnCount:30
Find models with the detection count less than 30.
model.totalVulnCount<30
Find models with the detection count less than or equal to 30.
model.totalVulnCount<=30