How to find available NQL fields

The list of available fields for use in NQL conditions can be found in the following manners:

  • Throughout the fusion portal, table column headers are the same fields used in NQL

  • For flow, event (alert), audit and block records, the "view raw source" expansion will also show the list of fields available for use in NQL queries.

  • The list available fields will automatically appear in a dropdown below the NQL search box when creating queries or filters in the Fusion Portal.

  • The list of available keys can be found at via the following API endpoints:
    https://api.netography.com/api/v1/stats/{context}/fields

📘

Note, the context of the API call [e.g. alert | audit | block | flow],

determines the keys available for use in writing the NQL.