AnsweredAssumed Answered

Help with a "simple" Asset search

Question asked by Vincent King on May 22, 2019
Latest reply on May 22, 2019 by derekv

I'm new to Qualys and am struggling to get an answer to a simple question.  "Qualys... to identify gaps in my estate, show me the Cloud Agents that haven't checked in in the last 24 hours".

I have attempted the following:

tags.name: "Cloud Agent" and not lastCheckedIn: [now-24h ... now]

This returns assets that have checked in "less than a minute ago"

 

I have tried:

tags.name: "Cloud Agent" and not lastCheckedIn: [2019-05-20 ... now]

Again this returns assets that have just checked in.

 

Also... trying:

tags.name: "Cloud Agent" and not lastCheckedIn: [now-4d ... now-2d]

returns recently checked in assets (a few seconds ago).

 

What am I doing wrong?

Outcomes