- 24 Mar 2022
- 3 Minutes to read
Save a Query
- Updated on 24 Mar 2022
- 3 Minutes to read
You can identify security gaps by running and saving a query about your assets.
Axonius supports a varitey of cybersecurity asset management use cases, that can be implemented by running the right query.
Read about some common use cases are described in the Axonius documentation site, under the Using Axonius category in the Use Cases subcategory. Use the navigation tree and the search bar to explore the various use cases, that include, but are not limited to:
- Finding Endpoints Missing Agents
- Finding Endpoint Agents Not Functioning Correctly
- Finding Devices Not Being Scanned For Vulnerabilities
- Discovering Cloud Instances Not Being Scanned For Vulnerabilities
- Finding Unmanaged Devices
- Finding Rogue Devices On Privileged Networks
To Achieve this Milestone
Use the Query Wizard on the Devices page to create a query, then save it so you can easily access it in the future.
Create and Save a Query
To run and save a query:
- Open the Devices page, click icon on the left navigation panel.
To create and run your own query:
From the Devices page, click Query Wizard on the top right corner above the Devices table.
The popup opens enables you to add filtering expressions upon different properties of devices. You can create multiple filter expressions and decide on the logical operators between them to create complex filtering conditions.
For example, the expression below filters all devices which Windows is their operating system (OS: Type) and such devices were seen in Axonius in the last 7 days:
- The Query Wizard consists of following elements which requires the user input to create a filter expression:
- WHERE/WHERE NOT switch
- AND / OR/ AND NOT/ OR NOT switch
- NOT Flag
- Source drop-down
- Adapter drop-down
- Field drop-down
- Operator drop-down
- Value field
- Bracket controls
- To run the query, click Search.
To learn more about the Query Wizard and advanced querying, see Query Wizard and Query Filter Bar.
- To change the displayed columns, click Edit Columns on the right side of the page just above the table. Notice you can pick any field from any adapter by selecting it on the top left selection. You can also narrow down the list of properties by typing into the search bar:
- To save a new unsaved query, click Save As next to the query name. A “Save as” popup is displayed in which you can type and determine the new saved query name.
To learn more about working with saved queries, see [Saved Queries (Devices)]/docs/saved-queries-devices).
Modify an Existing Query
To modify a saved query:
Open the Devices page, click icon on the left navigation panel.
Click Saved Queries on the top right corner above the query results table. The Saved Queries page opens, displaying all the saved queries for devices entities.
Search for a query and click its record to review its details.
Click Run Query to execute it.
Modify the query. Use the Query Wizard to change the query expressions or click Edit Columns to edit the query table columns.
Rename or Save the query:
- Rename a saved query by a single click on the query name.
- Save - Update the saved query you are working on.
- Save as - Save the query results as a new saved query.
Click Reset to reset the Devices page to its default column view and with no filtering, resulting in all devices being displayed.