Search Tokens for Policy Compliance

On the Posture tab of the enhanced Policy Compliance UI, use the QQL tokens to fetch data from the Qualys databases. For the ease of use, we’ve categorized the available search tokens into the Asset and Control data sources.

Note: As you start typing your query, the interface provides auto-suggest options only for those tokens that are valid for a particular data source.

You can build your search queries by using various combinations of these tokens. Click each token in the following lists to see the usage information.

Boolean operators | Asset tokens | Control tokens

Supported Boolean operators

The Qualys Query Language (QQL) supports the following logical or Boolean query operators. Use these operators in your queries to narrow down or broaden your search.

and

not

or

Search tokens for Asset data source

If you select the Asset data source in the query search bar, the following tokens are available for data search:

asset.created

asset.hostId

asset.interface.address

asset.interface.hostName

asset.isDataTruncated

asset.name

asset.operatingSystem

asset.trackingMethod

auth.lastComplianceSuccessDate

auth.status

auth.type

sensor.lastComplianceScanDate

tags.name

 

Search tokens for Control data source

If you select the Control data source in the query search bar, the following tokens are available for data search:

control.categoryName

control.id

control.statement

control.subcategoryName

control.type

criticality

exception.expirationDate

exception.isEvidenceBased

exception.number

exception.requestedDate

exception.status

policy.evaluatedDate

policy.id

policy.labelName

policy.lockType

policy.name

posture.controlReference

posture.evaluatedDate

posture.failFirstFoundDate

posture.failLastFoundDate

posture.firstEvaluatedDate

posture.hasException

posture.instance

posture.modifiedDate

posture.passFirstFoundDate

posture.passLastFoundDate

posture.previousStatus

posture.status

posture.subStatus

technology.categoryName

technology.name

technology.subcategoryName