More on Boolean queries

Using Boolean operators (AND, OR, NOT) give you many ways to refine your search.

Good to Know - Max query depth

We've implemented controls in query parsing for queries containing the operators AND, OR. The maximum depth allowed for an AND/OR query cannot cross 1000 levels. If you run a query having more than 1000 levels of depth, an error is returned.

A simple query like this has level of depth 2

asset.status:"Enrolled" and asset.isVulnerable:"Yes"

A more complex query like this has level of depth 5

(operatingSystem.name:"Android" or operatingSystem.name:"iOS") and (hardware.model:"SM-G935F" or hardware.model:"iPhone 7 Plus") and not asset.status:"De-enrolled"