Save a Query
  • 3 Minutes To Read
  • Print
  • Share
  • Dark
    Light

Save a Query

  • Print
  • Share
  • Dark
    Light

You can identify security gaps by running and saving a query about your assets.

The Devices page displays all the collected devices for the chosen query. The query name is displayed above the search bar.
If no query has been chosen, the page displays all collected devices.
image.png

Axonius supports a varitey of cybersecurity asset management use cases, that can be implemented by running the right query.
Common use cases are described in the Axoniuse documentation site, under the Using Axonius category in the Use Cases subcategory. Use the navigation tree and the search bar to explore the various use cases, that include, but are not limited to:

To Achieve this Milestone

Use the Query Wizard on the Devices page to create a query, then save it so you can easily access it in the future.

Create and Save a Query

To run and save a query:

  1. Open the Devices page, click image.png icon on the left navigation panel.
    image.png

  2. Click Query Wizard on the top right corner above the Devices table.

  3. The popup opens enables you to add filtering expressions upon different properties of devices. You can create multiple filter expressions and decide on the logical operators between them to create complex filtering conditions.

    The query wizard consists of following elements which requires the user input to create a filter expression:

    1. AND / OR switch
    2. NOT Flag
    3. Source drop-down
    4. Adapter drop-down
    5. Field drop-down
    6. Operator drop-down
    7. Value field
    8. Bracket controls

    For example, the expression below filters all devices which Windows is their operating system (OS: Type) and such devices were seen in Axonius in the last 7 days:

image.png


  1. To run the query, click Search.
    For more details on the Query Wizard elements and on advanced querying, see Query Wizard and Query Filter Bar.
  2. To change the displayed columns, click Edit Columns on the right side of the page just above the table. Notice you can pick any field from any adapter by selecting it on the top left selection. You can also narrow down the list of properties by typing into the search bar:
    image.png
NOTE
Click Reset to reset the Devices page to its default column view and with no filtering, resulted in all devices being displayed.
  1. To save a new unsaved query, click Save As next to the query name. A “save as” popup is displayed in which you can type and determine the new saved query name.
    image.png

Fore more details on working with saved queries, see Saved Queries (Devices).

Modify an Existing Query

To modify a saved query:

  1. Open the Devices page, click image.png icon on the left navigation panel.
    image.png

  2. Click Saved Queries on the top right corner above the query results table. The Saved Queries page opens, displaying all the saved queries for devices entities.
    image.png

  3. Search for a query and click its record to review its details.
    image.png

  4. Click Run Query to execute it.

  5. Modify the query. Use the Query Wizard to change the query expressions or click Edit Columns to edit the query table columns.

  6. Rename or Save the query:

    • Rename a saved query by a single click on the query name.
    • Save - Update the saved query you are working on.
    • Save as - Save the query results as a new saved query.
NOTE
Click Discard Changes to undo any changes made on the saved query you are working on and reload the saved query.
Click Reset to reset the Devices page to its default column view and with no filtering, resulted in all devices being displayed.



Fore more details on working with saved queries, see Saved Queries (Devices).
For more details on the Query Wizard elements and on advanced querying, see Query Wizard and Query Filter Bar.

Was This Article Helpful?