Search Tokens for Authentication

You can use the search tokens available in Authentication tab and refine your search results. Click each token to learn more about it.

Generic | Authentication

Generic

andand

Use a boolean query to express your query using AND logic.

Example

Find web applications with certain scan status and tag

webapp.lastScanStatus:"SUBMITTED" AND webapp.tags.name: "MS WAS 1000 Webapp"

notnot

Use a boolean query to express your query using NOT logic.

Example

Show search lists that are not dynamic search lists

NOT searchList.type:DYNAMIC

oror

Use a boolean query to express your query using OR logic.

Example

Show findings with one of these id values

vulnerability.id:3758394 OR vulnerability.id:3495166

Authentication Tokens

Use these search tokens to find authentications.

asset.idasset.id

Find authentication records associated to web application with given ID.

Example

Find authentication records associated to web application with given ID

asset.id:9725

asset.nameasset.name

Use values within quotes or backticks to find authentication records associated to web application with given name.

Examples

Find authentication records associated to web application that contains part of the given name.

asset.name:"TestWebapp"

Find authentication records associated to web application with the given name.

asset.name:`TestWebapp`

authenticationRecord.categoryauthenticationRecord.category

Use a text value ##### to find authentication records with specified categories: FORM_RECORD, SERVER_RECORD, OAUTH2_RECORD.

Example

Find authentication records with category FORM_RECORD

authenticationRecord.category:FORM_RECORD

authenticationRecord.createdauthenticationRecord.created

Use a date range or specific date to find authentication records created on the given date or date range.

Example

Show authentication records which were created in past 6 months

authenticationRecord.created:[now-6M.. now]

Show authentication records which were created on a specified date

authenticationRecord.created:"2020-03-20"

Show authentication records which were created after a specified date

authenticationRecord.created>"2020-03-20"

Show authentication records created between March 2020 to December 2020

authenticationRecord.created:[2020-03-01.. 2020-12-31]

authenticationRecord.hasClientCertificateauthenticationRecord.hasClientCertificate

Use the values true | false to find authentication record(s) with client certificate enabled.

Example

Find authentication record(s) which has client certificate enabled

authenticationRecord.hasClientCertificate:true

Find authentication record(s) which does not have client certificate enabled

authenticationRecord.hasClientCertificate:false

authenticationRecord.idauthenticationRecord.id

Use an integer value ##### to find authentication record with given ID.

Example

Find authentication record with given ID

authenticationRecord.id:9725)

authenticationRecord.isDefaultauthenticationRecord.isDefault

Use the values true | false to find authentication record(s) which is marked as default for one or more web applications.

Examples

Find authentication record(s) which is marked as default for one or more web application

authenticationRecord.isDefault:true

Find authentication record(s) which is not marked as default for any of the web application

authenticationRecord.isDefault:false

authenticationRecord.lastScanDateauthenticationRecord.lastScanDate

Use a date range or specific date to find authentication records that were last used in the scans in the given date range

Examples

Find authentication records that were last used in scans in past 6 months

authenticationRecord.lastScanDate:[now-6M .. now]

Find authentication records that were last used in scans on a specified date

authenticationRecord.lastScanDate:"2020-03-20"

Find authentication records that were last used in scans after a specified date

authenticationRecord.lastScanDate>"2020-03-20"

Find authentication records that were last used in scans between March 2020 to Dec 2020

authenticationRecord.lastScanDate:[2020-03-01..2020-12-31]

authenticationRecord.lastTestedauthenticationRecord.lastTested

Use a date range or specific date to find authentication records that were last tested in the scans in the given date range.

Examples

Find authentication records that were last tested in scans in past 6 months

authenticationRecord.lastTested: [now-6M.. now]

Find authentication records that were last tested in scans on a specified date

authenticationRecord.lastTesetd:"2020-03-20"

Find authentication records that were last tested in scans after a specified date

authenticationRecord.lastTested> "2020-03-20"

Find authentication records that were last tested in scans between March 2020 to Dec 2020

authenticationRecord.lastTested:[2020-03-01..2020-12-31]

authenticationRecord.nameauthenticationRecord.name

Use values within quotes or backticks to find authentication record with a given name.

Examples

Select authentication record with part of the given name.

authenticationRecord.name:"TestAuth"

Select authentication record with the given name.

authenticationRecord.name:`TestAuth`

authenticationRecord.owner.firstNameauthenticationRecord.owner.firstName

Use values within quotes or backticks to find authentication records with owner's first name.

Example

Find authentication records with owner's first name as Chandler

authenticationRecord.owner.firstName:Chandler

authenticationRecord.owner.lastNameauthenticationRecord.owner.lastName

Use values within quotes or backticks to find authentication records with owner's last name.

Example

Find authentication records with owner's last name as Bing

authenticationRecord.owner.lastName: Bing

authenticationRecord.owner.usernameauthenticationRecord.owner.username

Use values within quotes or back ticks to find authentication records with owner's username.

Example

Find authentication records with owner's username as quays_pp

authenticationRecord.owner.username:quays_pp

authenticationRecord.scanAuthStatusauthenticationRecord.scanAuthStatus

Use a text value ##### to find authentication status of last scan launched that used this authentication record: NOT_USED, SUCCESS, FAILURE, PARTIAL

Examples

Find authentication records for which the authentication status is FAILURE reported in their last scan.

authenticationRecord.scanAuthStatus:FAILURE

Find authentication records for which the authentication status is SUCCESS or PARTIAL reported in their last scan.

authenticationRecord.scanAuthStatus:[SUCCESS, PARTIAL]

authenticationRecord.typeauthenticationRecord.type

Use a text value ##### to find authentication records of certain types: AUTH_CODE, BASIC, CERTIFICATE, CLIENT_CREDS, CUSTOM, DIGEST, IMPLICIT, NTLM, PASSWORD, SELENIUM, STANDARD.

Examples

Find authentication record with STANDARD type.

authenticationRecord.type:STANDARD

Find authentication records with STANDARD, SELENIUM or NTLM type.

authenticationRecord.type:[STANDARD, SELENIUM, NTLM]

authenticationRecord.updatedauthenticationRecord.updated

Use a date range or specific date to find authentication records that were updated in the given date range

Examples

Find authentication records that were updated in past 6 months

authenticationRecord.updated:[now-6M .. now]

Find authentication records that were updated on a specified date

authenticationRecord.updated:"2020-03-20"

Find authentication records that were updated after a specified date

authenticationRecord.updated>"2020-03-20"

Find authentication records that were updated between March 2020 to Dec 2020

authenticationRecord.updated:[2020-03-01.. 2020-12-31]

authenticationRecord.updatedBy.firstNameauthenticationRecord.updatedBy.firstName

Use values within quotes or backticks to find authentication records updated by specified user’s first name.

Example

Find Authentication records that are updated by user whose firstName is Chandler

authenticationRecord.updatedBy.firstName:Chandler

authenticationRecord.updatedBy.lastNameauthenticationRecord.updatedBy.lastName

Use values within quotes or backticks to find authentication records updated by specified user’s last name.

Example

Find Authentication records that are updated by user whose last name is Bing

authenticationRecord.updatedBy.lastName:Bing

authenticationRecord.updatedBy.usernameauthenticationRecord.updatedBy.username

Use values within quotes or backticks to find authentication records updated by specified username.

Example

Find authentication records that were updated by a user with username is quays_pp

authenticationRecord.updatedBy.username:quays_pp

scan.idscan.id

Use an integer value ##### to find authentication records used in scan with given ID.

Example

Find authentication record which is used in the scan with given ID

scan.id:1234

scan.namescan.name

Use values within quotes or backticks to find authentication record used in scan with a given name.

Examples

Find authentication record that is used in the scan that contains part of the given name.

scan.name:"Scan1"

Find authentication record that is used in the scan with given name.

scan.name:`WAS Vulnerability Scan`

scan.schedule.idscan.schedule.id

Use an integer value ##### to find authentication records used in scheduled scan with given ID.

Example

Find authentication record which is used in the scheduled scan with given ID

scan.schedule.id:1234

scan.schedule.namescan.schedule.name

Use values within quotes or backticks to find authentication record used in scheduled scan with a given name.

Examples

Find authentication record that is used in the scheduled scan that contains part of given name.

scan.schedule.name:"schedule1"

Find authentication record that is used in the scheduled scan with given name.

scan.schedule.name:`schedule1`

tags.nametags.name

Use values within quotes or backticks to find authentication records with the given tag(s) associated with it.

Examples

Find authentication records that have part of the tag named "Internal P1" associated with it.

tags.name:"Internal P1"

Find authentication records that have tag named "Dev Internal" or "Production" associated with it.

tags.name:["Internal P1", "Production"]

Find authentication records that have the tag named `Target1` associated with it.

tags.name:`Target1`

authenticationRecord.quickFiltersauthenticationRecord.quickFilters

Use a text value ##### to find authentication records with specified quick filters: MY_AUTH_RECORDS, NOT_IN_USE, SET_AS_DEFAULT.

Examples

Find authentication records with current user as owner.

authenticationRecord.quickFilters:MY_AUTH_RECORDS

Find authentication records currently not associated with any web application.

authenticationRecord.quickFilters:NOT_IN_USE