Search Tokens for Applications, Detections, and Endpoints
You can use the search tokens available in Applications and Detections tab and refine your search results. Click each token to learn more about it.
Generic |
Generic
Use a boolean query to express your query using AND logic.
Example
Find applications with certain scan status and tag
application.lastScanStatus:"SUBMITTED" AND application.tags.name: "MS WAS 1000 Webapp"
Use a boolean query to express your query using NOT logic.
Example
Show web applications that don't have last scan status as CANCELED
NOT application.lastScanStatus:"CANCELED"
Use a boolean query to express your query using OR logic.
Example
Show findings with one of these id values
vulnerability.id:3758394 OR vulnerability.id:3495166
Application Tokens
Use these search tokens to find web applications.
Use an integer value ###### to find web application with specific application ID.
Example
Find a discovered web application with the application ID 123445.
asset.id:123445
discovery.createdDatediscovery.createdDate
Use the date values to find the web application created on specific date or date range.
Examples
Find the discovered web application created on specifc date YYYY-MM-DD.
discovery.createdDate: 2025-01-16
Find the discovered web application created in last six months.
discovery.createdDate: [now-6M .. now]
Find the discovered web application created between specific date range.
discovery.createdDate: [2024-12-01 . . 2025-02-01]
Find the discovered web application created before specific date.
discovery.createdDate <2025-02-01
Find the discovered web application created on or after specific date.
discovery.createdDate =>2025-02-01
Use the string value to find the web applications using the FQDN.
Examples
Find the discovered web application using its FQDN.
discovery.fqdn: fqdn_value
discovery.hostAssetIddiscovery.hostAssetId
Use the integer value to find the web application using its host asset ID.
Examples
Find the web application using its host asset ID.
discovery.hostAssetId: 12457965
discovery.ipAddressdiscovery.ipAddress
Use the integr value in quotes or backticks to find the web application using its IP address.
Examples
Find the web application matching the specified IP address.
discovery.ipAddress: `10.10.10.123`
Find the web application containing specified IP address value.
discovery.ipAddress: "10.10.10.123"
discovery.lastFoundDatediscovery.lastFoundDate
Use the date values to find the web application based on its discovery date.
Examples
Find the web application discovered on specifc date YYYY-MM-DD.
discovery.lastFoundDate: 2025-01-16
Find the web applications discovered in last six months.
discovery.lastFoundDate: [now-6M .. now]
Find the web applications discovered between specific date range.
discovery.lastFoundDate: [2024-12-01 . . 2025-02-01]
Find the web application discovered before specific date.
discovery.lastFoundDate <2025-02-01
Find the web application discovered on or after specific date.
discovery.lastFoundDate =>2025-02-01
Use the integer value to search the discovered web applications using their discovery port.
Example
Find a discovered web applications using their discovery port.
discovery.port:443
discovery.sourcesdiscovery.sources
Select a value from available options to search the web applications using discovery sources such as CSAM, TOTAL CLOUD, VMDR, and WAS.
Note: Currently we have integrated only the TotalCloud with the Web Application Scanning. Hence you won't be able to see the web applications discovered by other sources.
Examples
Find the web applications discovered by Qualys TotalCloud.
discovery.sources:TOTAL CLOUD
discovery.statusdiscovery.status
Select a Status value from available options to search the discovered web applications with specified status such as APPROVED, IN SUBSCRIPTION, NEW REJECTED, and ROGUE.
Examples
Find the APPROVED discovered web applications.
discovery.status:APPROVED
discovery.updatedDatediscovery.updatedDate
Use the date values to search the discovered web applications updated on specific date, date range, after or before a specified date.
Examples
Find the discovered web application updated on specifc date YYYY-MM-DD.
discovery.updatedDate: 2025-01-16
Find the discovered web applications updated in last six months.
discovery.updatedDate: [now-6M .. now]
Find the discovered web applications updated between specific date range.
discovery.updatedDate: [2024-12-01 . . 2025-02-01]
Find the discovered web application updated before specific date.
discovery.updatedDate<2025-02-01
Find the discovered web application updated on or after specific date.
discovery.updatedDate=>2025-02-01
discovery.subSourcesdiscovery.subSources
Select the sub source from the list to search the Web Applications discovered by API_DISCOVERY, AWS, AZURE, DISCOVERY_SCAN, MULESOFT, or VULNERABILITY_SCAN.
Examples
Find the Web Applications discovered as a result of the API discovery scan.
discovery.subSources:API_DISCOVERY
Find the Web Applications discovered by the AWS connector in TotalCloud.
discovery.subSources:AWS