Use the Query Builder

In the Exposure Response section, you can use the Query Builder to refine search results in the My Findings and My Affected Assets tabs or build queries for combinations.

How Queries Work

Queries are joined by Conditions (for example, AND). They have three components:

  • Filter — The search criteria (for example, for a finding, Severity).

  • Operator — The condition to filter on (for example, is not equal to).

  • Value — The value to search (for example, a Severity of High).

Tip: You can nest queries with parentheses. For example, to search for high-severity findings where the VPR is greater than seven or the CVSSv3 Base Score is greater than six, use:

Severity is equal to High AND (VPR is greater than 7 OR CVSSv3 is greater than 6) .

Build a Query

To build a query with the Query Builder:

  1. In the left navigation, click Menu Exposure Response.

    The Exposure Response page appears.

  2. Do one of the following:

    • Filter findings or affected assets — On the left, click an initiative. In the pane that appears, scroll down and click My Findings or My Affected Assets.

    • Build a query in a new combination — Click Manage Combinations > New to open the Create Combination pane.

  3. Click the query box.

    The Filters list appears. To review the filters you can use, see Query Builder Filters.

  4. In the Filters list, choose a filter.

    The Operators list appears.

  5. In the Operators list, choose an operator.

    For a filter where the value is text or a number, the Value Hint box appears. Otherwise, the Value Options list appears.

  6. Type a Value or select one from the list.

  7. (Optional) Add another query (that is, type a Condition and then add a Filter, an Operator, and a Value).

  8. Press Enter.

Edit a Query

To edit a query, do one of the following.

Action

Description

Replace a query component

In the query box, click the component to replace. A list of options appears.

Delete a query component

On the query component, click the X.

Clear a query

On the right side of the query box, click Clear.

Keyboard Shortcuts

Use the following keyboard shortcuts in the Query Builder. 

Shortcut

Description

Up Arrow or Down Arrow

Navigate lists of open-ended values such as text or numbers.

Right Arrow or Left Arrow

Move the cursor in your query or choose a date in the date picker.

Enter

Select a query component or date. If no component is selected, apply the query.

Esc

Close a list (for example, the Filters list).

Ctrl-C

Copy the highlighted text.

Ctrl-V

Paste your clipboard contents into the Query Builder.

Ctrl-Z

Undo the last action.

Ctrl-Y

Redo the last action.