How to enter dates in queries?
Date variables help you define a date or date range. Use a date range [start date..end date] or a specific date to search for dates.
For accurate results, we recommend you use the supported date formats - yyyy, yyyy-MM, and yyyy-MM-dd.
Date Query Examples
- Find assets with the last checked-in between January 1st, 2018, and December 31st, 2018 that is in yyyy date format
lastCheckedIn: "2018" -
Find assets with the last check-in between February 1st and 29th, 2018, that is in yyyy-MM
lastCheckedIn: "2018-02" -
Find assets with the last check-in anytime on February 1st, 2018, that is in yyyy-MM-dd
lastCheckedIn: "2018-02-01" -
Find assets with the last check-in on February 1st, 2018 from 10 to 11 AM that is in yyyy-MM-dd HH
lastCheckedIn: "2018-02-01 10" -
Find assets with the last check-in on February 1st, 2018 at 10:15 AM that is in yyyy-MM-dd HH:mm
lastCheckedIn: "2018-02-01 10:15" -
Find assets with the last check-in on February 1st, 2018 at 10:15:44 AM that is in yyyy-MM-dd HH:mm:ss
lastCheckedIn: "2018-02-01 10:15:44" - Find systems that were last booted between 1-2 months ago
system.lastBoot: [now-2M .. now-1M] - Find assets with vulnerabilities first found between January 1st and April 1st, 2018
vulnerabilities.firstFound: [2018-01-01 .. 2018-04-01] - Find assets with vulnerabilities last found between 10 days ago and 1-second ago
vulnerabilities.lastFound: [now-10d .. now-1s] - Find assets with vulnerabilities published between 2018-10-01 and 2018-10-03
vulnerabilities.vulnerability.published: [2018-10-01 .. 2018-10-03] - Find assets with vulnerabilities published on February 1st, 2018
vulnerabilities.vulnerability.published: '2018-02-01' - Find assets with vulnerabilities first found on February 1st, 2018, at time 10:53:4
vulnerabilities.firstFound: "2018-02-01 10:53:49" - Find assets with vulnerabilities first found between January 1st and April 1st, 2018
vulnerabilities.firstFound: [2018-01-01 .. 2018-04-01]
Comparison Operators
We support comparison operators in your date searches.
- vulnerabilities.vulnerability.published > 2018-03-12
- vulnerabilities.vulnerability.published >= 2018-03-12
- vulnerabilities.vulnerability.published < 2018-03-12
- vulnerabilities.vulnerability.published <= 2018-03-12
Use the keyword now
Type the now keyword then a number and a time unit: y (year), M (month), w (week), d (day), h (hour), m (minute), s (second)
- now-1y for 1 year ago
- now-2M for 2 months ago
- now-5d for 5 days ago