Home

How to enter dates in your queries

To search for dates you'll use a date range [start date .. end date] or a specific date.

Examples

Find systems that were last booted between 1-2 months ago

system.lastBoot: [now-2M .. now-1M]

Find assets with vulnerabilities first found between January 1st and April 1st 2018

vulnerabilities.firstFound: [2018-01-01 .. 2018-04-01]

Find assets with vulnerabilities last found between 10 days ago and 1 second ago

vulnerabilities.lastFound: [now-10d .. now-1s]

Find assets with vulnerabilities published between 2018-10-01 and 2018-10-03

vulnerabilities.vulnerability.published: [2018-10-01 .. 2018-10-03]

Find assets with vulnerabilities published on February 1st 2018

vulnerabilities.vulnerability.published: '2018-02-01'

Find assets with vulnerabilities first found on February 1st 2018 at time 10:53:49

vulnerabilities.firstfound: "2018-02-01 10:53:49"

Find assets with vulnerabilities first found between January 1st and April 1st 2018

vulnerabilities.firstFound: [2018-01-01 .. 2018-04-01]

Date variables

Date variables help you define a date or date range you're interested in. We support yyyy, yyyy-MM, yyyy-MM-dd and more.

Find assets with last check-in between January 1st 2018 and December 31st 2018 (i.e. yyyy)

lastCheckedIn: "2018"

Find assets with last check-in between February 1st and 29th 2018 (i.e. yyyy-MM)

lastCheckedIn: "2018-02"

Find assets with last check-in anytime on February 1st 2018 (i.e. yyyy-MM-dd)

lastCheckedIn: "2018-02-01"

Find assets with last check-in on February 1st 2018 from 10 to 11am (i.e. yyyy-MM-dd HH)

lastCheckedIn: "2018-02-01 10"

Find assets with last check-in on February 1st 2018 at 10:15am (i.e. yyyy-MM-dd HH:mm)

lastCheckedIn: "2018-02-01 10:15"

Find assets with last check-in on February 1st 2018 at 10:15:44am (i.e. yyyy-MM-dd HH:mm:ss)

lastCheckedIn: "2018-02-01 10:15:44"

Use the "now" shortcut

Type now- then a number and a time unit: y (year), M (month), w (week), d (day), h (hour), m (minute), s (second)

now-1y for 1 year ago

now-2M for 2 months ago

now-5d for 5 days ago

Comparison operators

We support comparison operators in your date searches.

vulnerabilities.vulnerability.published > 2018-03-12

vulnerabilities.vulnerability.published >= 2018-03-12

vulnerabilities.vulnerability.published < 2018-03-12

vulnerabilities.vulnerability.published <= 2018-03-12