Skip to content

Keywords

Keywords are special expressions that help you create complex OQL queries.

Note

Keywords are not case-sensitive.

AND

Use AND to combine two or more clauses in a single search. To list an item, each OQL clause must apply.

elf.symbol.imported = TRUE AND elf.symbol.static = TRUE

This query displays all static files that also have an imported symbol.

OR

Use OR to combine two or more clauses in a single search. To list an item, at least one of the OQL clauses must apply.

elf.symbol.imported = TRUE OR elf.symbol.static= TRUE

This query displays all static files and all files that have an imported symbol.

NOT

Use NOT to negate an operator, an individual clause, or a complex OQL query.

type = HardcodedAccountPasswordIssue AND NOT line CONTAINS "root"

This displays all Hardcoded account password issues that do not contain a line with the word root.

To negate an entire clause, place it in parentheses:

severity = CRITICAL OR NOT (severity = HIGH AND confidence = HIGH)

This query displays all security issues with CRITICAL severity, as well as those whose severity and confidence are not HIGH (so for example, MEDIUM-severity issues with HIGH confidence are still included in the search).