Skip to content

This document provides details on the filters supported by each provider for each API operation. Filters can be used to restrict the results of an API operation, such as filtering by a specific field or value.

They are used in conjunction with the filter query parameter in the API request.

CrowdStrike Falcon® Spotlight filters for query_assets

FieldOperatorsSupported Values
device.hostnameeqstring
device.ipeqstring
device.last_seen_timegte, ltedatetime
device.maceqstring

Nucleus VM filters for query_assets

FieldOperatorsSupported Values
device.hostnameeqstring
device.ipeqstring

Qualys VMDR filters for query_assets

FieldOperatorsSupported Values
device.hostnameeqstring
device.ipeqstring
device.last_seen_timegtedatetime
device.maceqstring

Rapid7 InsightVM filters for query_assets

FieldOperatorsSupported Values
device.hostnameeq, instring
device.ipeq, instring
device.last_seen_timegtedatetime
device.maceq, instring

ServiceNow Vulnerability Response filters for query_assets

FieldOperatorsSupported Values
device.hostnameeqstring
device.ipeqstring
device.last_seen_timegtedatetime
device.maceqstring
device.nameeqstring

Tanium VM filters for query_assets

FieldOperatorsSupported Values
device.hostnameeqstring
device.ipeqstring
device.last_seen_timegtedatetime
device.maceqstring

Tenable VM filters for query_assets

FieldOperatorsSupported Values
device.hostnameeqstring
device.ipeqstring
device.last_seen_timegtedatetime
device.maceqstring

[MOCK] Qualys VMDR filters for query_assets

FieldOperatorsSupported Values
device.hostnameeqstring
device.ipeqstring
device.last_seen_timegtedatetime
device.maceqstring

[MOCK] Rapid7 InsightVM Cloud filters for query_assets

FieldOperatorsSupported Values
device.hostnameeq, instring
device.ipeq, instring
device.last_seen_timegtedatetime
device.maceq, instring

[MOCK] Tanium Vulnerability Management filters for query_assets

FieldOperatorsSupported Values
device.hostnameeqstring
device.ipeqstring
device.last_seen_timegtedatetime
device.maceqstring

[Mock] CrowdStrike Falcon® Spotlight filters for query_assets

FieldOperatorsSupported Values
device.hostnameeqstring
device.ipeqstring
device.last_seen_timegte, ltedatetime
device.maceqstring

CrowdStrike Falcon® Spotlight filters for query_findings

FieldOperatorsSupported Values
finding.first_seen_timegte, ltedatetime
finding.last_seen_timegte, ltedatetime
severityeq, incritical, high, medium, low, info

Nucleus VM filters for query_findings

FieldOperatorsSupported Values
severityeqcritical, high, medium, low, info

Qualys VMDR filters for query_findings

FieldOperatorsSupported Values
finding.first_seen_timegte, ltedatetime
finding.last_seen_timegte, ltedatetime
severityeq, incritical, high, medium, low, info

Rapid7 InsightVM filters for query_findings

FieldOperatorsSupported Values
finding.first_seen_timegte, ltedatetime
finding.last_seen_timegte, ltedatetime
severityeq, incritical, high, medium, low, info

ServiceNow Vulnerability Response filters for query_findings

FieldOperatorsSupported Values
finding.first_seen_timegte, ltedatetime
finding.last_seen_timegte, ltedatetime
severityeq, incritical, high, medium, low, info

Tanium VM filters for query_findings

FieldOperatorsSupported Values
finding.first_seen_timegte, ltedatetime
finding.last_seen_timegte, ltedatetime
severityeq, incritical, high, medium, low, info

Tenable VM filters for query_findings

FieldOperatorsSupported Values
finding.first_seen_timegtedatetime
finding.last_seen_timegtedatetime
severityeq, incritical, high, medium, low, info

[MOCK] Qualys VMDR filters for query_findings

FieldOperatorsSupported Values
finding.first_seen_timegte, ltedatetime
finding.last_seen_timegte, ltedatetime
severityeq, incritical, high, medium, low, info

[MOCK] Rapid7 InsightVM Cloud filters for query_findings

FieldOperatorsSupported Values
finding.first_seen_timegte, ltedatetime
finding.last_seen_timegte, ltedatetime
severityeq, incritical, high, medium, low, info

[MOCK] Tanium Vulnerability Management filters for query_findings

FieldOperatorsSupported Values
finding.first_seen_timegte, ltedatetime
finding.last_seen_timegte, ltedatetime
severityeq, incritical, high, medium, low, info

[Mock] CrowdStrike Falcon® Spotlight filters for query_findings

FieldOperatorsSupported Values
finding.first_seen_timegte, ltedatetime
finding.last_seen_timegte, ltedatetime
severityeq, incritical, high, medium, low, info