Wireless inventory
When viewing WiFi networks, you can use the keywords in this section to search and filter.
SSID and ESSID
The SSID/ESSID field can be searched using the syntax ssid:<text>
.
ssid:"Guest Network"
ssid:"Corporate"
BSSID (MAC)
The BSSID field can be searched using the syntax bssid:<text>
or mac:<text>
.
bssid:"00:01:02:03:04:05"
mac:"00:01:%"
Vendor
The vendor field can be searched using the syntax mac_vendor:<text>
.
mac_vendor:"Google"
mac_vendor:"Netgear"
mac_vendor:"Cisco"
Family
The family field can be searched using the syntax family:<term>
.
family:"010304"
Channels
The channels field can be searched using the syntax channel:<term>
.
channel:"11"
Type
The network type field can be searched using the syntax type:<text>
.
type:"infrastructure"
Interface
The network interface field can be searched using the syntax interface:<text>
.
interface:"wlan0"
Encryption
The encryption field can be searched using the syntax encryption:<term>
.
encryption:"aes"
encryption:"none"
Authentication
The authentication field can be searched using the syntax authentication:<term>
.
authentication:"wpa2-psk"
authentication:"open"
Timestamps
The timestamp fields (first_seen, last_seen, created_at) timestamps can be searched using the syntax first_seen:<term>
, last_seen:<term>
and created_at:<term>
. The term supports the standard runZero [time comparison syntax][time].
first_seen:<30seconds
first_seen:>2019-08-01
last_seen:<1week
last_seen:<2months
created_at:>2weeks
created_at:<30minutes
Signal
The signal field can be searched using the syntax signal:<number>
or sig:<number>
. The term can include the operators >
, =
, <=
, and =
. The default operator is =
.
signal:">75"
signal:"<=25"
signal:99
Organization name or ID
Use the syntax organization:<term>
to filter by organization name or ID.
organization:runZero
organization:"Temporary Project"
organization:f1c3ef6d-cb41-4d55-8887-6ed3cfb3d42d
Site name or ID
The site name or ID can be used as a filter with the syntax site:<term>
site:Primary
site:"Branch Office"
site:ad67d649-041b-439d-af59-f200053a8899
Explorer name or ID
The Explorer name or ID can be used as a filter with the syntax explorer:<term>
explorer:DESKTOP-AB451F
explorer:8b927a8e-d405-40e9-aa47-d6afc9bff237
Wireless ID
The ID field is the unique identifier for a given wireless network, written as a UUID. This field is searched using the syntax id:<uuid>
.
id:cdb084f9-4811-445c-8ea1-3ea9cf88d536
Last task ID
The Last Task ID field defines which task most recently reported the wireless network and is written as a UUID. This field is searched using the syntax task:<uuid>
.
task:39ab0e71-3cf1-4176-b6b0-4ed495288229
Wireless attributes
All wireless attributes can be searched using the syntax <attribute>:<term>
.
radio_type:"802.11n"