3.2.4.3.2. With Query¶

This does the following:

Since a query is supplied, this will only return device assets that match the query.
Get device assets and include the generic field os.type.

$ axonshell devices get \
  --query '(specific_data.data.last_seen >= date("NOW - 3d")) and (specific_data.data.os.type == "Windows")' \
  --field os.type --max-rows 4

3.2.4.3.2.1. Notes¶

Note

This example works the same for both the devices get and users get commands.

Note

When using CSV export, if a cells length goes beyond 32,000 characters it will be trimmed to 30,000 and the following text will be added at the end of the cell: ...TRIMMED - 500 items over max cell length 30000

Note

If –query-file is supplied, it will override –query if that is also supplied.