How to find available NQL fields
The list of available fields for use in NQL conditions can be found in the following manners:
-
Throughout the fusion portal, table column headers are the same fields used in NQL
-
For flow, event (alert), audit and block records, the "view raw source" expansion will also show the list of fields available for use in NQL queries.
-
The list available fields will automatically appear in a dropdown below the NQL search box when creating queries or filters in the Fusion Portal.
-
The list of available keys can be found at via the following API endpoints:
https://api.netography.com/api/v1/stats/{context}/fields
Note, the context of the API call [e.g.
alert
|audit
|block
|flow
],determines the keys available for use in writing the NQL.
Updated about 1 year ago