Querying Report Data

You can specify to display only specific report information in which you are particularly interested. You can show a query as either columns or rows. You can then specify the query criteria.

To perform an advanced query, follow these steps:

1. Select the report that you want. To run a report, see Viewing a Report.
2. In the Report Result window, click the Advanced Query tool. The Advanced Query dialog box appears.
3. Do one of the following:

• For events reports, specify the query criteria for the device name, event type, item name, description, event details, serial number, Routing Engine, or time.
• For hardware inventory reports, specify the query criteria for the device name, model, hardware name, hardware version, part number, serial number, hardware description, chassis ID, module, submodule, sub-submodule, time created. or time last scanned.
• For licensing inventory reports, specify the query criteria for the device, model, feature name, feature description, free ports used, licenses used, licenses installed, licenses needed, time created, or time last scanned.
• For software inventory reports, specify the query criteria for the device name, model number, Routing Engine on which the software package is installed, software version, package name, package description, time created, or time last scanned.

4. Select an Device query operator. Table 29 provides a reference for the query operators you can select.
   
   
   Table 29: Advanced Query Operators

   Operator	Description
   =	(The default operator) Searches for records that exactly equal the search criteria.
   not =	Searches for records that do not match the search criteria.
   between	Searches for records that fall between a specified range.
   not between	Searches for records that do not fall between a specified range.
   in	Searches for records that match any of the specified values (up to four).
   not in	Searches for records that match none of the specified values (up to four).
   <	Searches for records that are less than the search criteria.
   <=	Searches for records that are less than or equal to the search criteria.
   >	Searches for records that are greater than the search criteria.
   >=	Searches for records that are greater than or equal to the search criteria.
   empty	Searches for records that have an empty value in the specified column/field. For example, perform an advance query for events inventory with "serial number is not empty" and do one with "serial number is empty".
   not empty	Searches for records that have a non-empty value in the specified column/field.
   like	Searches for records that match the search criteria.
   not like	Searches for records that do not match the search criteria.

   
   

NOTE: For the like and not like operators, use % as the wildcard for the matching target. For example, bad % would match badlands but not toobadlands. To match toobadlands, use %bAd%. The match is case insensitive. The like operator applies to columns with a string value such as device, type, item, description, event details, serial number, and Routing Engine in any Events Inventory reports. The like operator does not apply to Time, which has a type of Date. For more information about using the like operator, see Using the Like Device Query Operator.

5. In the Device search text box, type a device name in the Device search text box. You can also click the device name in the report to view all records for
   that report.
6. Select an event Type search operator.
7. In the Type search text box, type the event type that you want to see in the Type search text box.
8. Select a Time search operator.
9. In the Time search text box, type a time. For this procedure, type the current date and time. You can copy a specific date and time from a report and paste it into the search text box.
   

   NOTE: The format for Time is EEE MMM dd HH:mm:ss z yyyy, where: EEE = Day in week (for example, Tue.) MMM = Month in year (for example, Jan.) dd = Day in month (for example, 05) HH = Hour in day (for example, 23) mm = Minute in hour (for example, 20) ss = Second in minute (for example, 47) z = Time zone (for example, GMT) yyyy = Year (for example, 2004) To search for all items created on or after 3-5-2004 8pm PST 2004, type the following in the search field: >= Fri Mar 05 20:00:00 PST 2004.

   
   
10. Click Submit Query. The criteria you specified is displayed in the Report Result page.

For example, the following is an all events report advanced query.

The query produces the following report.