# NQL Keywords

### Looking up NQL Keywords in Fusion <a href="#looking-up-nql-keywords-in-fusion" id="looking-up-nql-keywords-in-fusion"></a>

When constructing NQL queries in the Fusion Portal, the list of both the available fields and values (when applicable) will automatically appear in a dropdown below the NQL search box under **Keywords**. .

![Example: dstgeo.countrycode description](https://1075194167-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F7upncbzIm3grJePXaOO9%2Fuploads%2Fgit-blob-2ef69ec68639401d548875ae5a900cf0348597f8%2Fd4bb3d79dc562accba2db087821e96d4d4234239cc0e37bf8999d8a633688894.png?alt=media)

Example: dstgeo.countrycode description

### Using NQL Keyword Auto-Complete Suggestions <a href="#using-nql-keyword-auto-complete-suggestions" id="using-nql-keyword-auto-complete-suggestions"></a>

When you enter a keyword in the NQL textbox, a list of valid values for that keyword will pop up if available. For example, all boolean fields will have true or false value suggestions. The values for fields in which the Fusion Portal can perform lookups will also have suggestions.

![Example: dstgeo.countrycode valid values and meaning](https://1075194167-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F7upncbzIm3grJePXaOO9%2Fuploads%2Fgit-blob-2f4d67769975909ac1e594806e702a5b7768d861%2Fa2905c595446952835e43a3698bc068173d920ba26d05dc35cd936f3f32eba8f.png?alt=media)

Example: dstgeo.countrycode valid values and meaning

### List of NQL Keyword Values with Auto-Complete Suggestions <a href="#list-of-nql-keyword-values-with-auto-complete-suggestions" id="list-of-nql-keyword-values-with-auto-complete-suggestions"></a>

#### Flow <a href="#flow" id="flow"></a>

```
dstas.number
dstas.org
dstgeo.continentcode
dstgeo.countrycode
dstipname (deprecated)
dstiprep.categories
dstname (deprecated)
dstowneras.number
dstowneras.org
dstport
dstportname (deprecated)
flowsrcname
labels.ip.name.src
labels.ip.name.dstseverity
labels.port.name
rules.plugins.name
rules.name
site
srcas.number
srcas.org
srcgeo.continentcode
srcgeo.countrycode
srcipname (deprecated)
srciprep.categories
srcowneras.number
srcowneras.org
srcport
srcportname (deprecated)
tags
```

#### Events <a href="#events" id="events"></a>

```
alerttype
algorithm
categories
dstportnames
dstports
flowsrcnames
ipinfo.as.number
ipinfo.as.org
ipinfo.geo.continentcode
ipinfo.geo.countrycode
ipinfo.iprep.categories
rules
severity
sites
srcportnames
srcports
tags
tdm.description
tdm.name
```

#### Audit <a href="#audit" id="audit"></a>

```
action
class
source
subclass
```

#### Block <a href="#block" id="block"></a>

```
active
adapter
algorithms
dstas.number
dstas.org
dstgeo.continentcode
dstgeo.countrycode
dstipname
dstiprep.categories
dstname
dstport
dstportname
plugin.description
plugin.name
protocol
rules
severity
srcas.number
srcas.org
srcgeo.continentcode
srcgeo.countrycode
srcipname
srciprep.categories
srcname
srcport
srcportname
```