KSC Open API  13.1
Kaspersky Security Center API description
Computer query format

List of attributes used in computer query is presented below.

NameTypeDescriptionAdditional information
"Name"paramStringComputer query display name 
"PredefinedID"paramStringPredefined query ID 
"Query"paramStringSearch filter that has syntax resembling one from RFC 2254See Search filter syntax

Details

  1. Each subcontainer (AVBasesPageSettings, AdPageSettings etc) corresponds to appropriate Query's property page in KSC Console
  2. Each subcontainer (AVBasesPageSettings, AdPageSettings etc) must have "Query" parameter which contains part of result Administration Server query string composed from parameters contained in this subcontainer

Full set of parameters of computer query:

+--- (paramParams)
    +---Name = (paramString)"My Computer Query"
    +---ORedArray (paramArray)
    |   +---0 (paramParams)
    |       +---Name = (paramString)"Query Part 1"
    |       +---AVBasesPageSettings (paramParams)                                                                                               - AV Bases subcontainer
    |       |   +---Query = (paramString)"(&(&(KLHST_WKS_AV_BASES_DATE>=T"2017-8-3 12:57:47")(KLHST_WKS_AV_BASES_DATE<=T"2017-8-3 13:57:47"))
    |       |   |                      (&(KLHST_WKS_AV_BASES_RECORDS>=1)(KLHST_WKS_AV_BASES_RECORDS<=2000000000))
    |       |   |                      (&(KLHST_WKS_LAST_FULLSCAN>=T"2017-8-3 13:57:47")(KLHST_WKS_LAST_FULLSCAN<=T"2017-8-3 14:57:47"))
    |       |   |                      (&(KLHST_WKS_VIRUS_COUNT>=1)(KLHST_WKS_VIRUS_COUNT<=1000000)))"
    |       |   +---avb_records_from = (\ref kloapi_type_paramInt)1                                                                                              - AV Bases records range (from). See \ref ak_hst_attributes_srchonly "KLHST_WKS_AV_BASES_RECORDS"
    |       |   +---avb_records_to = (paramInt)2000000000                                                                                       - AV Bases records range (to)
    |       |   +---avbases_from = (paramDateTime)03-08-2017 12:57:00                                                                          - AV Bases date (from). See KLHST_WKS_AV_BASES_DATE
    |       |   +---avbases_to = (paramDateTime)03-08-2017 13:57:00                                                                            - AV Bases date (to)
    |       |   +---avbases_days = (paramInt)3                                                                                                  - AV Bases date in form of "days past for now". If it != 0 then avbases_from and avbases_to ignored. See KLHST_WKS_AV_BASES_DATE
    |       |   +---lfs_from = (paramDateTime)03-08-2017 13:57:00                                                                              - Last full scan time (from). See KLHST_WKS_LAST_FULLSCAN
    |       |   +---lfs_to = (paramDateTime)03-08-2017 14:57:00                                                                                - Last full scan time (to)
    |       |   +---lfs_days = (paramInt)3                                                                                                      - Last full scan time in form of "days past for now". If lfs_days != 0 then lfs_from and lfs_to ignored. See KLHST_WKS_LAST_FULLSCAN
    |       |   +---viruses_from = (paramInt)1                                                                                                  - Viruses found (form). See KLHST_WKS_LAST_FULLSCAN
    |       |   +---viruses_to = (paramInt)1000000                                                                                              - Viruses found (to)
    |       +---AdPageSettings (paramParams)                                                                                                    - ActiveDirectory subcontainer
    |       |   +---ActiveDirOUGroupID = (paramInt)432                                                                                          - Active Directory organizational unit ID. See KLHST_AD_ORGUNIT
    |       |   +---SearchInSubDir = (paramBool)true                                                                                            - Search in nested organizational units. If SearchInSubDir == true use parameter KLHST_AD_ORGUNIT_GP else use KLHST_AD_ORGUNIT
    |       |   +---KLHST_AD_GROUP = (paramInt)17069                                                                                            - Active Directory group ID. See KLHST_AD_GROUP
    |       |   +---Query = (paramString)"(&(KLHST_AD_ORGUNIT_GP=432)(KLHST_AD_GROUP=17069))"
    |       +---AppPageSettings (paramParams)                                                                                                   - Application subcontainer
    |       |   +---HasAv = (paramInt)1                                                                                                         - Antivirus installed (1 - yes, 0 - no). Placed in query as KLHST_WKS_STATUS & 0x00000010
    |       |   +---Managed = (paramInt)1                                                                                                       - Computer is managed by KSC (1 - yes, 0 - no). Placed in query as KLHST_WKS_STATUS & 0x00000004
    |       |   +---ProductName = (paramString)"1103"                                                                                           - Application internal name. See KLHST_WKS_PRODUCT_NAME
    |       |   +---ProductRawVersion = (paramString)"1.0.0.0"                                                                                  - Application internal version. See KLHST_WKS_PRODUCT_VERSION
    |       |   +---ProductVersion = (paramString)"1.0"                                                                                         - Application display version. See KLHST_WKS_PRODUCT_DISPLAY_VERSION
    |       |   +---ProductVersionCF = (paramString)"upd"                                                                                       - Application critical update name. See KLHST_HF_DN
    |       |   +---ProductVersionCFInstalled = (paramBool)true                                                                                 - Application critical update installed flag. if (ProductVersionCFInstalled == true) use in query KLHST_HF_DN else use KLHST_INCLUDED_HF_DN
    |       |   +---Query = (paramString)"(&(&(KLHST_WKS_PRODUCT_NAME="1103")(KLHST_WKS_PRODUCT_VERSION="1.0.0.0"))
    |       |   |                        (KLHST_WKS_PRODUCT_DISPLAY_VERSION="1.0")(KLHST_HF_DN="upd")
    |       |   |                        (&(KLHST_WKS_LAST_UPDATE>=T"2017-8-3 12:56:55")(KLHST_WKS_LAST_UPDATE<=T"2017-8-3 13:56:55"))
    |       |   |                        (KLHST_WKS_STATUS&4<>0)(KLHST_WKS_STATUS&16<>0))"
    |       |   +---lut_from = (paramDateTime)03-08-2017 12:56:00                                                                              - Last update time (from). See KLHST_WKS_LAST_UPDATE
    |       |   +---lut_to = (paramDateTime)03-08-2017 13:56:00                                                                                - Last update time (to)
    |       |   +---lut_days = (paramInt)3                                                                                                      - Last update time in form of "days past for now". If lut_days != 0 then lut_from and lut_to ignored. See KLHST_WKS_LAST_UPDATE
    |       +---DPE_PAGE_SETTINGS (paramParams)                                                                                                 - DPE subcontainer
    |       |   +---DPE_ALG = (paramString)"AES192"                                                                                             - DPE algorithm (supported by KSC 10 SP3 and higher)
    |       |   +---Query = (paramString)"(&(KLHST_WKS_DPE_ALGORITHM="AES192"))"
    |       +---HWInvPageSettings (paramParams)                                                                                                 - Hardware inventory subcontainer
    |       |   +---HWInvCpuSpeed_From = (paramInt)1                                                                                            - CPU frequency (MHz) (from). See KLHST_HWINV_CPU_SPEED
    |       |   +---HWInvCpuSpeed_To = (paramInt)100                                                                                            - CPU frequency (MHz) (to)
    |       |   +---HWInvCpuThreads_From = (paramInt)1                                                                                          - CPU parallel threads (from). See KLHST_HWINV_CPU_THREADS
    |       |   +---HWInvCpuThreads_To = (paramInt)3                                                                                            - CPU parallel threads (to)
    |       |   +---HWInvDeviceManuf = (paramString)"man"                                                                                       - Manufacturer name. See KLHST_HWINV_DEVICE_MANUFACTURER
    |       |   +---HWInvDeviceName = (paramString)"dev"                                                                                        - Device name. See KLHST_HWINV_DEVICE_NAME
    |       |   +---HWInvStorageDescr = (paramString)"descr"                                                                                    - Description. See KLHST_HWINV_STORAGE_DESCR
    |       |   +---HWInvStorageDiskSize_From = (paramInt)1                                                                                     - Disk size (from). See KLHST_HWINV_STORAGE_DISKSIZE
    |       |   +---HWInvStorageDiskSize_To = (paramInt)2                                                                                       - Disk size (to)
    |       |   +---HWInvStorageInvNum = (paramString)"222333"                                                                                  - Inventory number. See KLHST_HWINV_STORAGE_INVNUM
    |       |   +---HWInvStorageManuf = (paramString)"man name"                                                                                 - Manufacturer. See KLHST_HWINV_STORAGE_MANUF
    |       |   +---HWInvStorageMemSize_From = (paramInt)1                                                                                      - Memory size (MB) (from). See KLHST_HWINV_STORAGE_MEMSIZE
    |       |   +---HWInvStorageMemSize_To = (paramInt)2                                                                                        - Memory size (MB) (to)
    |       |   +---HWInvStorageName = (paramString)"comp"                                                                                      - Computer name. See KLHST_HWINV_STORAGE_NAME
    |       |   +---HWInvStoragePlacement = (paramString)"room 112"                                                                             - Placement. See KLHST_HWINV_STORAGE_PLACEMENT
    |       |   +---HWInvStorageSerialNum = (paramString)"111222333"                                                                            - Serial number. See KLHST_HWINV_STORAGE_SERIALNUM
    |       |   +---HWInvStorageUserName = (paramString)"user"                                                                                  - User name. See KLHST_HWINV_STORAGE_USERNAME
    |       |   +---Query = (paramString)"(&(KLHST_HWINV_DEVICE_NAME="dev")(KLHST_HWINV_DEVICE_MANUFACTURER="man")
    |       |                            (KLHST_HWINV_STORAGE_NAME="comp")(KLHST_HWINV_STORAGE_DESCR="descr")
    |       |                            (KLHST_HWINV_STORAGE_MANUF="man name")(KLHST_HWINV_STORAGE_SERIALNUM="111222333")
    |       |                            (KLHST_HWINV_STORAGE_INVNUM="222333")(KLHST_HWINV_STORAGE_USERNAME="user")
    |       |                            (KLHST_HWINV_STORAGE_PLACEMENT="room")
    |       |                            (&(KLHST_HWINV_STORAGE_DISKSIZE>=1)(KLHST_HWINV_STORAGE_DISKSIZE<=2))
    |       |                            (&(KLHST_HWINV_STORAGE_MEMSIZE>=1)(KLHST_HWINV_STORAGE_MEMSIZE<=2))
    |       |                            (&(KLHST_HWINV_CPU_SPEED>=1)(KLHST_HWINV_CPU_SPEED<=100))
    |       |                            (&(KLHST_HWINV_CPU_THREADS>=1)(KLHST_HWINV_CPU_THREADS<=3)))"
    |       +---Hsdp (paramParams)                                     - HSDP subcontainer
    |       |   +---HsdpStatuses = (paramString)"KES/10.3.0.0/CDA747748CFC45FA85CB417FB744D707;KES/10.3.0.0/94CC2E816105465781EED0ED67610AD8;"  - HSDP statuses divided by ";". See KLHST_WKS_HSDP_REASON
    |       |   +---Query = (paramString)"(|(KLHST_WKS_HSDP_REASON="KES/10.3.0.0/CDA747748CFC45FA85CB417FB744D707")
    |       |                            (KLHST_WKS_HSDP_REASON="KES/10.3.0.0/94CC2E816105465781EED0ED67610AD8"))"
    |       +---InventoryAppPageSettings (paramParams)                                                                                          - Third party product inventory subcontainer. (See InvSrvViewName and InventoryApi)
    |       |   +---InventoryTags = (paramString)"11"                                                                                           - Application tag. Use in query KLHST_INVENTORY_INCLUDED_PRODUCT_TAG_NAME (Same as KLTAGS_TAG_VALUE and KLTAGS_INCLUDED_TAG_VALUE from InvSrvViewName)
    |       |   +---ExcludeInventoryTags = (paramBool)true                                                                                      - The parameter accepts true if hosts are searched where InventoryTags is set.
    |       |   +---InventoryProductName = (paramString)""AMD Catalyst Install Manager""                                                        - Application name. If InventoryFindByUpdate = true then KLHST_INVENTORY_PATCH_NAME, otherwise KLHST_INVENTORY_PRODUCT_NAME
    |       |   +---InventoryDisplayVersion = (paramString)"1.22"                                                                               - Application version. If InventoryFindByUpdate = true then KLHST_INVENTORY_PATCH_DISPLAY_VERSION, otherwise KLHST_INVENTORY_PRODUCT_DISPLAY_VERSION
    |       |   +---InventoryPublisher = (paramString)""Microsoft""                                                                             - Application publisher. If InventoryFindByUpdate = true then KLHST_INVENTORY_PATCH_PUBLISHER, otherwise KLHST_INVENTORY_PRODUCT_PUBLISHER
    |       |   +---InventoryFindByUpdate = (paramBool)false                                                                                    - The parameter accepts true if search will be by application update, otherwise - by application
    |       |   +---InventoryInstalled = (paramBool)true                                                                                        - The parameter accepts true if hosts with installed application or update are searched.
    |       |   |                                                                                                                                 When searched by absent application it is needed to use KLHST_INVENTORY_INCLUDED_PRODUCT_NAME (or KLHST_INVENTORY_INCLUDED_PATCH_NAME for
    |       |   |                                                                                                                                 InventoryFindByUpdate). And the value  for this attribute is created from values InventoryProductName, InventoryDisplayVersion, InventoryPublisher by next
    |       |   |                                                                                                                                 schema: ("value of InventoryProductName with double quotes")("value of InventoryDisplayVersion with double quotes")("value of InventoryPublisher with
    |       |   |                                                                                                                                 double quotes"). For example: KLHST_INVENTORY_INCLUDED_PRODUCT_NAME <> "("AMD Catalyst Install Manager")("1.22")("Microsoft")".
    |       |   +---CompetitorProductName = (paramString)"Ashampoo FireWall"                                                                    - Name of incompatible application. KLHST_WKS_COMPETITOR_PRODUCT_NAME (List of possible values can be get from field INIFILE_PRODUCT_NAME from list of
    |       |   |                                                                                                                                 cleaner initialization files that returned by InventoryApi::GetSrvCompetitorIniFileInfoList)
    |       |   +---Query = (paramString)"(&(KLHST_INVENTORY_PRODUCT_NAME="""AMD Catalyst Install Manager""")
    |       |                            (KLHST_INVENTORY_PRODUCT_DISPLAY_VERSION="1.22")
    |       |                            (KLHST_INVENTORY_PRODUCT_PUBLISHER="""Microsoft""")
    |       |                            (KLHST_INVENTORY_INCLUDED_PRODUCT_TAG_NAME<>"11"))"
    |       +---NetInfoExPageSettings (paramParams)                                                                                             - Network information subcontainer
    |       |   +---FoundLastNDays = (paramInt)2                                                                                                - Computer discovery period (days). See KLHST_WKS_CREATED
    |       |   +---HostIsUA = (paramInt)1                                                                                                      - Computer is UpdateAgent. See HST_HAS_UPDATE_AGENT
    |       |   +---HostKeepConn = (paramInt)1                                                                                                  - Computer has "Keep connection" flag set. See KLHST_WKS_KEEP_CONNECTION
    |       |   +---Alien = (paramInt)1                                                                                                         - Computer is controlled by other Administration Server. See KLHST_MANAGED_OTHER_SERVER. Values: 0 - ignored, 1 - Yes, 2 - No.
    |       |   +---Query = (paramString)"(&(HST_HAS_UPDATE_AGENT<>0)(KLHST_WKS_KEEP_CONNECTION<>0)
    |       |   |                        (&(KLHST_WKS_LAST_NAGENT_CONNECTED>=T"2017-8-3 13:56:26")
    |       |   |                          (KLHST_WKS_LAST_NAGENT_CONNECTED<=T"2017-8-3 16:56:26"))
    |       |   |                        (KLHST_WKS_CREATED>=CURTIME(-172800))(KLHST_WKS_STATUS&32<>0)
    |       |   |                        (KLHST_WKS_STATUS&1<>0)(KLHST_MANAGED_OTHER_SERVER<>0))"
    |       |   +---RoamingStatus = (\ref kloapi_type_paramInt)1                                                                                                  - Roaming status. Placed in query as \ref ak_hst_attributes "KLHST_WKS_STATUS" & 32
    |       |   +---Visible = (\ref kloapi_type_paramInt)1                                                                                                        - Visible status. Placed in query as \ref ak_hst_attributes "KLHST_WKS_STATUS" & 1
    |       |   +---lct_from = (\ref kloapi_type_paramDateTime)03-08-2017 13:56:00                                                                               - Computer Last connection time range (from). See \ref ak_hst_attributes "KLHST_WKS_LAST_NAGENT_CONNECTED"
    |       |   +---lct_to = (paramDateTime)03-08-2017 16:56:00                                                                                 - Computer Last connection time range (to)
    |       |   +---lct_days = (paramInt)3                                                                                                       - Computer Last connection time in form of "days past for now". If lct_days != 0 then lct_from and lct_to ignored. See KLHST_WKS_LAST_NAGENT_CONNECTED
    |       |
    |       +---NetInfoPageSettings (paramParams)                                                                                                - General network information subcontainer
    |       |   +---Comment = (paramString)"comment"                                                                                              - See KLHST_WKS_COMMENT and KLINCDT_BODY
    |       |   +---DomainName = (paramString)"domain"                                                                                           - See KLHST_WKS_WINDOMAIN
    |       |   +---HostGroup = (paramString)"group"                                                                                             - KSC Group name
    |       |   +---HostName = (paramString)"*"                                                                                                  - See KLHST_WKS_DN, KLHST_WKS_WINHOSTNAME and KLHST_WKS_DNSNAME
    |       |   +---IPFrom = (paramInt)1                                                                                                         - Computers IP range (from). See KLHST_WKS_IP_LONG
    |       |   +---IPTo = (paramInt)2                                                                                                           - Computers IP range (to)
    |       |   +---Query = (paramString)"(&(|(KLHST_WKS_DN="*")(KLHST_WKS_WINHOSTNAME="*")(KLHST_WKS_DNSNAME="*"))
    |       |                            (name="group")(KLHST_WKS_WINDOMAIN="domain")
    |       |                            (|(KLHST_WKS_COMMENT="comment")(KLINCDT_BODY="comment"))
    |       |                            (&(KLHST_WKS_IP_LONG>=1)(KLHST_WKS_IP_LONG<=2)))"
    |       |
    |       +---OsPageSettings (paramParams)                                                                                                     - OS subcontainer
    |       |   +---CpuArch = (paramInt)3                                                                                                        - See Process Architecture enum and KLHST_WKS_CPU_ARCH
    |       |   +---OsSp = (paramString)"1.2"                                                                                                    - OS Service pack version (X.Y). See KLHST_WKS_OS_VER_MAJOR, KLHST_WKS_OS_VER_MINOR
    |       |   +---OsVerType (paramArray)                                                                                                       - OS Version type. See KLHST_WKS_CTYPE
    |       |   |   +---0 = (paramInt)21                                                                                                         - See OS Version Indices
    |       |   |   +---1 = (paramInt)13                                                                                                         - See Platform Type enum
    |       |   |   +---2 = (paramInt)19                                                                                                         - See Windows Network Host Type enum
    |       |    +---OsBuild=(INT)16233                                                                                                        - OS Build number (KLHST_WKS_OS_BUILD_NUMBER=16233)
    |       |    +---OsBuildCond=(INT)0                                                                                                        - OS Build number comparison condition (0-equal, 1-not equal, 2-greater, 3-less)
    |       |    +---OsRelease=(INT)1700                                                                                                       - OS Release ID (KLHST_WKS_OS_RELEASE_ID<>1700)
    |       |    +---OsReleaseCond=(INT)1                                                                                                      - OS Release ID comparison condition (0-equal, 1-not equal, 2-greater, 3-less)
    |       |   +---Query = (paramString)"(&(|(KLHST_WKS_PTYPE=12)(KLHST_WKS_PTYPE=6)(KLHST_WKS_PTYPE=10))
    |       |                            (&(KLHST_WKS_OSSP_VER_MAJOR=1)(KLHST_WKS_OSSP_VER_MINOR=2))
    |       |                            (KLHST_WKS_CPU_ARCH=3))"
    |       |
    |       +---PCSPageSettings (paramParams)                                                                                                    - Product components statuses (PCS) subcontainer
    |       |   +---Csp = (paramInt)3                                                                                                            - See KLHST_WKS_COLLAB_SRVS_STATUS
    |       |   +---Cspcond = (paramInt)0                                                                                                        - Status condition (0 - "=", 1 - "<>")
    |       |   +---Dlp = (paramInt)0                                                                                                            - See KLHST_WKS_DLP_STATUS
    |       |   +---Dlpcond = (paramInt)1                                                                                                        - Status condition (0 - "=", 1 - "<>")
    |       |   +---Eas = (paramInt)9                                                                                                            - See KLHST_WKS_EMAIL_AV_STATUS
    |       |   +---Eascond = (paramInt)0                                                                                                        - Status condition (0 - "=", 1 - "<>")
    |       |   +---Edr = (paramInt)4                                                                                                            - See KLHST_WKS_EDR_STATUS
    |       |   +---Edrcond = (paramInt)1                                                                                                        - Status condition (0 - "=", 1 - "<>")
    |       |   +---Query = (paramString)"(&(KLHST_WKS_DLP_STATUS<>0)(KLHST_WKS_COLLAB_SRVS_STATUS=3)
    |       |                            (KLHST_WKS_EMAIL_AV_STATUS=9)(KLHST_WKS_EDR_STATUS<>4))"
    |       |
    |       +---ProtectionPageSettings (paramParams)                                                                                             - Protection Settings subcontainer
    |       |   +---HostStatusDescr (paramArray)                                                                                                 - See Host State enum
    |       |   |   +---0 = (paramInt)1
    |       |   |   +---1 = (paramInt)2
    |       |   +---Query = (paramString)"(&(&(KLHST_WKS_STATUS_ID=1)(KLHST_WKS_FROM_UNASSIGNED=0))
    |       |   |                        (KLHST_WKS_RTP_STATE=4)
    |       |   |                        (|(KLHST_WKS_STATUS_MASK_0<>0)(KLHST_WKS_STATUS_MASK_1<>0)))"
    |       |   +---RtpStatusId = (\ref kloapi_type_paramInt)4                                                                                                   - Rtp Status. See Global RTP State below. See \ref ak_hst_attributes "KLHST_WKS_RTP_STATE"
    |       |   +---StatusId = (\ref kloapi_type_paramInt)1                                                                                                      - Computer Status. See Computer Status below. See \ref ak_hst_attributes "KLHST_WKS_STATUS_ID". If StatusId == 0 (OK) then query must be combined by AND with
    |       |                                                                                                                                     "KLHST_WKS_FROM_UNASSIGNED=0" condition
    |       +---UsersPageSettings (paramParams)                                                                                                 - User information subcontainer
    |       |   +---CurUserId = (paramString)"602D928CDDB0D642ABB4F3E2B18CD3CB"                                                                 - Currently logged in user ID. See KLHST_WKS_SESSION_USER_BINID
    |       |   +---Query = (paramString)"(&(KLHST_WKS_SESSION_USER_BINID=0x602D928CDDB0D642ABB4F3E2B18CD3CB)
    |       |   |                        (KLHST_WKS_USER_BINID=0x1E3C37059125724F89FD41663793F061))"
    |       |   +---UserId = (paramString)"1E3C37059125724F89FD41663793F061"                                                                    - Logged in user ID. See KLHST_WKS_USER_BINID
    |       |
    |       +---VDIPageSettings (paramParams)                                                                                                   - VDI subcontainer
    |       |   +---PartVDI = (paramInt)1                                                                                                       - Part of VDI infrastructure (<>0 - yes, =0 - no). See HST_VM_VDI
    |       |   +---Query = (paramString)"(&(HST_VM_TYPE<>2)(HST_VM_TYPE<>0)(HST_VM_VDI<>0)(HST_VM_TYPE=4))"
    |       |   +---VM = (paramInt)1                                       - Is VM (0 - Ignore, 1 - yes, 2 - no)
    |       |   +---VMType = (paramInt)4                                                                                                        - Type of VM. See KLSTD::VmDetected. See HST_VM_TYPE
    |       |
    |       +---VapmPageSettings (paramParams)                                                                                                  - VAPM subcontainer
    |       |   +---Query = (paramString)"(&(KLHST_WUA_SWITCHED<>0))"
    |       |   +---WUA_SWITCHED = (paramInt)1                                                                                                  - Is WUA switched to KSC on host (0 - Ignore, 1 - yes, 2 - no). See KLHST_WUA_SWITCHED
    |       |
    |       +---TagsPageSettings (paramParams)
    |       |   +---HostTags = (paramString)"Tag1\r0\nTag2\r1\n"                                                                                - List of selected tags delimited by "\n". Each tag has format: "[tag name]\r[1-tag is included or 0-tag is excluded]"
    |       |   +---OrHostTags = (paramBool)true                                                                                                - The parameter accepts true if group tags by OR else group tags by AND
    |       |   +---Query = (paramString)"(|(KLHST_INCLUDED_WKS_TAG_NAME="aaaa")(KLHST_INCLUDED_WKS_TAG_NAME<>"bbbb"))"
    |       |
    |       +---PRODCOMPS (paramParams)
    |       |   +---PRODCOMPS_COMPS = (paramString)"ConnProd/1.0.0.0/59C431F07D5C4633AC7BFCB569A2B394;ConnProd/1.0.0.0/7275439F21EE4C799A1A6EF02CF53920;"    - Product components list in format "[comp1];[comp2];"
                                    where [compN] in format "[prod_name]/[prod_version]/[componentId]".
                                    Query string is "(&(KLHST_PRCST_PRODUCT_NAME="ConnProd")(KLHST_PRCST_PRODUCT_VERSION="1.0.0.0")(KLHST_PRCST_COMPONENT_ID=0x59C431F07D5C4633AC7BFCB569A2B394))".
                                    See KLHST_PRCST_PRODUCT_NAME, KLHST_PRCST_PRODUCT_VERSION, KLHST_PRCST_COMPONENT_ID
    |       |   +---PRODCOMPS_COMPS_STATUS = (paramInt)0                                                                                        - Component status. If value is -1 then status not set. See KLHST_PRCST_COMPONENT_STATUS
    |       |   +---PRODCOMPS_COMPS_VER = (paramString)"22"                                                                                     - Component version. See KLHST_PRCST_COMPONENT_VERSION
    |       |   +---PRODCOMPS_COMPS_VER_COND = (paramInt)0                                                                                      - Component version condition (0-equal, 1-not equal, 2-greater, 3-less)
    |       |   +---Query = (paramString)"(|(&(KLHST_PRCST_PRODUCT_NAME="ConnProd")(KLHST_PRCST_PRODUCT_VERSION="1.0.0.0")(KLHST_PRCST_COMPONENT_ID=0x59C431F07D5C4633AC7BFCB569A2B394)(KLHST_PRCST_COMPONENT_STATUSKLHST_PRCST_COMPONENT_STATUS=0)(KLHST_PRCST_COMPONENT_VERSION=22))(&(KLHST_PRCST_PRODUCT_NAME="ConnProd")(KLHST_PRCST_PRODUCT_VERSION="1.0.0.0")(KLHST_PRCST_COMPONENT_ID=0x7275439F21EE4C799A1A6EF02CF53920)(KLHST_PRCST_COMPONENT_STATUS=0)(KLHST_PRCST_COMPONENT_VERSION=22)))"
    |       |
    |       +---AllHsdp (paramParams)
    |       |   +---HsdpStatuses = (paramString)"ConnProd/1.0.0.0/59C431F07D5C4633AC7BFCB569A2B394;KES/11.0.0.0/CDA747748CFC45FA85CB417FB744D707;KES/10.3.0.0/CDA747748CFC45FA85CB417FB744D707;"    - Product HSDP statuses list in format "[status1];[status2];"
                                    where [statusN] in format "[prod_name]/[prod_version]/[statusId]".
                                    Query string is "(KLHST_WKS_HSDP_ALLREASONS="ConnProd/1.0.0.0/59C431F07D5C4633AC7BFCB569A2B394")"
                                    See KLHST_WKS_HSDP_ALLREASONS
    |       |   +---Query = (paramString)"(|(KLHST_WKS_HSDP_ALLREASONS="ConnProd/1.0.0.0/59C431F07D5C4633AC7BFCB569A2B394")(KLHST_WKS_HSDP_ALLREASONS="KES/11.0.0.0/CDA747748CFC45FA85CB417FB744D707")(KLHST_WKS_HSDP_ALLREASONS="KES/10.3.0.0/CDA747748CFC45FA85CB417FB744D707"))"
    |       |
    |       +---cloud_page_settings (paramParams)                                                                                               - Cloud subcontainer
    |           +---Query = (paramString)"(&(KLHST_CLOUD_CONTAINER_GP=0x00000000000000000000000000000000)(KLHST_CLOUD_HOST_TYPE=2))"
    |           +---cloud_id = (paramString)"00000000000000000000000000000000"                                                                  - Cloud container ID. See KLHST_CLOUD_CONTAINER
    |           +---cloud_type = (paramInt)2                                                                                                    - Cloud type. See Cloud Type enum and KLHST_CLOUD_HOST_TYPE
    |           +---search_in_subclouds = (paramBool)true                                                                                       - Search in cloud subcontainers. See KLHST_CLOUD_CONTAINER_GP
    +---Query = (paramString)"(&(&(&(KLHST_WKS_AV_BASES_DATE>=T"2017-8-3 12:57:47")(KLHST_WKS_AV_BASES_DATE<=T"2017-8-3 13:57:47"))
    |                          (&(KLHST_WKS_AV_BASES_RECORDS>=1)(KLHST_WKS_AV_BASES_RECORDS<=2000000000))
    |                          (&(KLHST_WKS_LAST_FULLSCAN>=T"2017-8-3 13:57:47")(KLHST_WKS_LAST_FULLSCAN<=T"2017-8-3 14:57:47"))
    |                          (&(KLHST_WKS_VIRUS_COUNT>=1)(KLHST_WKS_VIRUS_COUNT<=1000000)))
    |                        (&(&(KLHST_WKS_PRODUCT_NAME="1103")(KLHST_WKS_PRODUCT_VERSION="1.0.0.0"))
    |                          (KLHST_WKS_PRODUCT_DISPLAY_VERSION="1.0")
    |                          (KLHST_HF_DN="upd")(&(KLHST_WKS_LAST_UPDATE>=T"2017-8-3 12:56:55")
    |                          (KLHST_WKS_LAST_UPDATE<=T"2017-8-3 13:56:55"))
    |                          (KLHST_WKS_STATUS&4<>0)(KLHST_WKS_STATUS&16<>0))
    |                        (&(KLHST_WKS_DPE_ALGORITHM="AES192"))
    |                        (&(KLHST_HWINV_DEVICE_NAME="dev")(KLHST_HWINV_DEVICE_MANUFACTURER="man")(KLHST_HWINV_STORAGE_NAME="comp")
    |                          (KLHST_HWINV_STORAGE_DESCR="descr")(KLHST_HWINV_STORAGE_MANUF="man name")
    |                          (KLHST_HWINV_STORAGE_SERIALNUM="111222333")(KLHST_HWINV_STORAGE_INVNUM="222333")
    |                          (KLHST_HWINV_STORAGE_USERNAME="user")(KLHST_HWINV_STORAGE_PLACEMENT="room")
    |                          (&(KLHST_HWINV_STORAGE_DISKSIZE>=1)(KLHST_HWINV_STORAGE_DISKSIZE<=2))
    |                          (&(KLHST_HWINV_STORAGE_MEMSIZE>=1)(KLHST_HWINV_STORAGE_MEMSIZE<=2))
    |                          (&(KLHST_HWINV_CPU_SPEED>=1)(KLHST_HWINV_CPU_SPEED<=100))
    |                          (&(KLHST_HWINV_CPU_THREADS>=1)(KLHST_HWINV_CPU_THREADS<=3)))
    |                        (|(KLHST_WKS_HSDP_REASON="KES/10.3.0.0/CDA747748CFC45FA85CB417FB744D707")
    |                          (KLHST_WKS_HSDP_REASON="KES/10.3.0.0/94CC2E816105465781EED0ED67610AD8"))
    |                        (&(KLHST_INVENTORY_PRODUCT_NAME="""AMD Catalyst Install Manager""")
    |                          (KLHST_INVENTORY_PRODUCT_DISPLAY_VERSION="1.22")(KLHST_INVENTORY_PRODUCT_PUBLISHER="""ActiveState""")
    |                          (KLHST_INVENTORY_INCLUDED_PRODUCT_TAG_NAME<>"11"))
    |                        (&(HST_HAS_UPDATE_AGENT<>0)(KLHST_WKS_KEEP_CONNECTION<>0)
    |                          (&(KLHST_WKS_LAST_NAGENT_CONNECTED>=T"2017-8-3 13:56:26")
    |                            (KLHST_WKS_LAST_NAGENT_CONNECTED<=T"2017-8-3 16:56:26"))
    |                          (KLHST_WKS_CREATED>=CURTIME(-172800))(KLHST_WKS_STATUS&32<>0)(KLHST_WKS_STATUS&1<>0))
    |                        (KLHST_WKS_DN="*")
    |                        (&(|(KLHST_WKS_PTYPE=12)(KLHST_WKS_PTYPE=6)(KLHST_WKS_PTYPE=10))
    |                          (&(KLHST_WKS_OSSP_VER_MAJOR=1)(KLHST_WKS_OSSP_VER_MINOR=2))(KLHST_WKS_CPU_ARCH=3))
    |                        (&(KLHST_WKS_DLP_STATUS<>0)(KLHST_WKS_COLLAB_SRVS_STATUS=3)(KLHST_WKS_EMAIL_AV_STATUS=9)
    |                          (KLHST_WKS_EDR_STATUS<>4))
    |                        (&(&(KLHST_WKS_STATUS_ID=1)(KLHST_WKS_FROM_UNASSIGNED=0))(KLHST_WKS_RTP_STATE=4)
    |                          (|(KLHST_WKS_STATUS_MASK_0<>0)(KLHST_WKS_STATUS_MASK_1<>0)))
    |                        (&(KLHST_WKS_SESSION_USER_BINID=0x602D928CDDB0D642ABB4F3E2B18CD3CB)
    |                          (KLHST_WKS_USER_BINID=0x1E3C37059125724F89FD41663793F061))
    |                        (&(HST_VM_TYPE<>2)(HST_VM_TYPE<>0)(HST_VM_VDI<>0)(HST_VM_TYPE=4))
    |                        (&(KLHST_WUA_SWITCHED<>0))
    |                        (&(KLHST_CLOUD_CONTAINER_GP=0x00000000000000000000000000000000)(KLHST_CLOUD_HOST_TYPE=2)))"                     - Full query string
    +---QueryVer = (paramInt)2
See also: