Automating queries
runZero’s query language allows you to search and filter your asset inventory, based on asset fields and values. runZero includes a query library of prebuilt searches which can be browsed from the Queries page. You can apply these queries after a scan to investigate discovery findings.
In addition to a flexible query language, the same search syntax can be used to track and monitor events across your network, based on any combination of fields. You can save your custom queries to reuse over and over again. Review the query syntax documentation for a refresher on how to build a query.
If there are certain queries you always want to run after a scan, you can turn on the Auto option. After the query runs, you will be able to view its results in the Queries table.
From the Queries table, any filter that has checkmark in the Auto column means that it is active. The Matches column is next to it. You can click on the numbered result in the Matches column to view the results of the query. If there were no matches, the filter will show 0.
Turn on automatic search queries
- Select Queries from the left navigator.
- Open or create the query you want to turn on.
- Turn on the Automatically track query results on the dashboard option.
- Save the query.