Actions19
- Vulnerability Actions
- PII Actions
- Access Audit Actions
- Benchmark Actions
Benchmark → Search
AI-generatedSummary
Searches for benchmark records based on various filters, grouping, and sorting options to retrieve security benchmark check results.
Inputs
- Quick Filters — Boolean flags to filter for only failed checks, passed checks, or critical security benchmarks.
- Benchmark IDs — Comma-separated list of benchmark IDs to restrict the search to specific benchmarks.
- Status — Multi-select to filter results by benchmark status: pass or fail.
- Agent UUIDs — Comma-separated list of agent UUIDs to filter benchmark results by specific agents.
- Hostnames — Comma-separated list of hostnames to limit results to particular hosts.
- Benchmark Categories — Multi-select to filter by benchmark categories such as Windows Security, Linux Security, Network Security, Database Security, Web Application Security, and Cloud Security.
- Date Range — Select a predefined date range (last 24 hours, 7 days, 30 days, 90 days) or custom range for filtering benchmarks by last checked time.
- Custom Date Range — When 'Custom' date range is selected, specify start and end datetime to filter benchmarks checked after and before these dates.
- Group By — Optionally group the search results by hostname, benchmark ID, status, category, or no grouping for analysis.
- Sort By — Field and order to sort results by, such as last checked timestamp, hostname, benchmark ID, or status.
- Limit — Maximum number of benchmark results to return; zero means no limit.
Output shape
a list of benchmark records, optionally grouped by the selected field, each containing benchmark check details and status
Results reflect applied filters including quick filters and date ranges; grouping transforms the output into grouped objects with count and items arrays; sorting controls result order; limit controls maximum results returned.