Maximum Query Depth
We have implemented controls in query parsing for queries containing the operators “AND” and “OR”. The maximum depth allowed for an AND/OR query cannot exceed 1000 levels. If you run a query having more than 1000 levels of depth, you see an error.
- A simple query like this has a level of depth 2
asset: (lastBoot: '2018-10-10' AND cpuCount: 2)
- A more complex query like this has a level of depth 5
(operatingSystem: "Windows 7 SP2 Enterprise" OR operatingSystem: "Windows 2002") AND (hardware: "Dell Latitude e7470" OR hardware: "Dell Inspiron") AND NOT asset.lastBoot <= "2018-11-01"