KSC Open API
Kaspersky Security Center API description
|
List of attributes used in computer query is presented below.
Name | Type | Description | Additional information |
---|---|---|---|
"Name" | paramString | Computer query display name | |
"PredefinedID" | paramString | Predefined query ID | |
"Query" | paramString | Search filter that has syntax resembling one from RFC 2254 | See Search filter syntax |
Full set of parameters of computer query:
+--- (paramParams) +---Name = (paramString)"My Computer Query" +---ORedArray (paramArray) | +---0 (paramParams) | +---Name = (paramString)"Query Part 1" | +---AVBasesPageSettings (paramParams) - AV Bases subcontainer | | +---Query = (paramString)"(&(&(KLHST_WKS_AV_BASES_DATE>=T"2017-8-3 12:57:47")(KLHST_WKS_AV_BASES_DATE<=T"2017-8-3 13:57:47")) | | | (&(KLHST_WKS_AV_BASES_RECORDS>=1)(KLHST_WKS_AV_BASES_RECORDS<=2000000000)) | | | (&(KLHST_WKS_LAST_FULLSCAN>=T"2017-8-3 13:57:47")(KLHST_WKS_LAST_FULLSCAN<=T"2017-8-3 14:57:47")) | | | (&(KLHST_WKS_VIRUS_COUNT>=1)(KLHST_WKS_VIRUS_COUNT<=1000000)))" | | +---avb_records_from = (\ref kloapi_type_paramInt)1 - AV Bases records range (from). See \ref ak_hst_attributes_srchonly "KLHST_WKS_AV_BASES_RECORDS" | | +---avb_records_to = (paramInt)2000000000 - AV Bases records range (to) | | +---avbases_from = (paramDateTime)03-08-2017 12:57:00 - AV Bases date (from). See KLHST_WKS_AV_BASES_DATE | | +---avbases_to = (paramDateTime)03-08-2017 13:57:00 - AV Bases date (to) | | +---avbases_days = (paramInt)3 - AV Bases date in form of "days past for now". If it != 0 then avbases_from and avbases_to ignored. See KLHST_WKS_AV_BASES_DATE | | +---lfs_from = (paramDateTime)03-08-2017 13:57:00 - Last full scan time (from). See KLHST_WKS_LAST_FULLSCAN | | +---lfs_to = (paramDateTime)03-08-2017 14:57:00 - Last full scan time (to) | | +---lfs_days = (paramInt)3 - Last full scan time in form of "days past for now". If lfs_days != 0 then lfs_from and lfs_to ignored. See KLHST_WKS_LAST_FULLSCAN | | +---viruses_from = (paramInt)1 - Viruses found (form). See KLHST_WKS_LAST_FULLSCAN | | +---viruses_to = (paramInt)1000000 - Viruses found (to) | +---AdPageSettings (paramParams) - ActiveDirectory subcontainer | | +---ActiveDirOUGroupID = (paramInt)432 - Active Directory organizational unit ID. See KLHST_AD_ORGUNIT | | +---SearchInSubDir = (paramBool)true - Search in nested organizational units. If SearchInSubDir == true use parameter KLHST_AD_ORGUNIT_GP else use KLHST_AD_ORGUNIT | | +---KLHST_AD_GROUP = (paramInt)17069 - Active Directory group ID. See KLHST_AD_GROUP | | +---Query = (paramString)"(&(KLHST_AD_ORGUNIT_GP=432)(KLHST_AD_GROUP=17069))" | +---AppPageSettings (paramParams) - Application subcontainer | | +---HasAv = (paramInt)1 - Antivirus installed (1 - yes, 0 - no). Placed in query as KLHST_WKS_STATUS & 0x00000010 | | +---Managed = (paramInt)1 - Computer is managed by KSC (1 - yes, 0 - no). Placed in query as KLHST_WKS_STATUS & 0x00000004 | | +---ProductName = (paramString)"1103" - Application internal name. See KLHST_WKS_PRODUCT_NAME | | +---ProductRawVersion = (paramString)"1.0.0.0" - Application internal version. See KLHST_WKS_PRODUCT_VERSION | | +---ProductVersion = (paramString)"1.0" - Application display version. See KLHST_WKS_PRODUCT_DISPLAY_VERSION | | +---ProductVersionCF = (paramString)"upd" - Application critical update name. See KLHST_HF_DN | | +---ProductVersionCFInstalled = (paramBool)true - Application critical update installed flag. if (ProductVersionCFInstalled == true) use in query KLHST_HF_DN else use KLHST_INCLUDED_HF_DN | | +---Query = (paramString)"(&(&(KLHST_WKS_PRODUCT_NAME="1103")(KLHST_WKS_PRODUCT_VERSION="1.0.0.0")) | | | (KLHST_WKS_PRODUCT_DISPLAY_VERSION="1.0")(KLHST_HF_DN="upd") | | | (&(KLHST_WKS_LAST_UPDATE>=T"2017-8-3 12:56:55")(KLHST_WKS_LAST_UPDATE<=T"2017-8-3 13:56:55")) | | | (KLHST_WKS_STATUS&4<>0)(KLHST_WKS_STATUS&16<>0))" | | +---lut_from = (paramDateTime)03-08-2017 12:56:00 - Last update time (from). See KLHST_WKS_LAST_UPDATE | | +---lut_to = (paramDateTime)03-08-2017 13:56:00 - Last update time (to) | | +---lut_days = (paramInt)3 - Last update time in form of "days past for now". If lut_days != 0 then lut_from and lut_to ignored. See KLHST_WKS_LAST_UPDATE | +---DPE_PAGE_SETTINGS (paramParams) - DPE subcontainer | | +---DPE_ALG = (paramString)"AES192" - DPE algorithm (supported by KSC 10 SP3 and higher) | | +---Query = (paramString)"(&(KLHST_WKS_DPE_ALGORITHM="AES192"))" | +---HWInvPageSettings (paramParams) - Hardware inventory subcontainer | | +---HWInvCpuSpeed_From = (paramInt)1 - CPU frequency (MHz) (from). See KLHST_HWINV_CPU_SPEED | | +---HWInvCpuSpeed_To = (paramInt)100 - CPU frequency (MHz) (to) | | +---HWInvCpuThreads_From = (paramInt)1 - CPU parallel threads (from). See KLHST_HWINV_CPU_THREADS | | +---HWInvCpuThreads_To = (paramInt)3 - CPU parallel threads (to) | | +---HWInvDeviceManuf = (paramString)"man" - Manufacturer name. See KLHST_HWINV_DEVICE_MANUFACTURER | | +---HWInvDeviceName = (paramString)"dev" - Device name. See KLHST_HWINV_DEVICE_NAME | | +---HWInvStorageDescr = (paramString)"descr" - Description. See KLHST_HWINV_STORAGE_DESCR | | +---HWInvStorageDiskSize_From = (paramInt)1 - Disk size (from). See KLHST_HWINV_STORAGE_DISKSIZE | | +---HWInvStorageDiskSize_To = (paramInt)2 - Disk size (to) | | +---HWInvStorageInvNum = (paramString)"222333" - Inventory number. See KLHST_HWINV_STORAGE_INVNUM | | +---HWInvStorageManuf = (paramString)"man name" - Manufacturer. See KLHST_HWINV_STORAGE_MANUF | | +---HWInvStorageMemSize_From = (paramInt)1 - Memory size (MB) (from). See KLHST_HWINV_STORAGE_MEMSIZE | | +---HWInvStorageMemSize_To = (paramInt)2 - Memory size (MB) (to) | | +---HWInvStorageName = (paramString)"comp" - Computer name. See KLHST_HWINV_STORAGE_NAME | | +---HWInvStoragePlacement = (paramString)"room 112" - Placement. See KLHST_HWINV_STORAGE_PLACEMENT | | +---HWInvStorageSerialNum = (paramString)"111222333" - Serial number. See KLHST_HWINV_STORAGE_SERIALNUM | | +---HWInvStorageUserName = (paramString)"user" - User name. See KLHST_HWINV_STORAGE_USERNAME | | +---Query = (paramString)"(&(KLHST_HWINV_DEVICE_NAME="dev")(KLHST_HWINV_DEVICE_MANUFACTURER="man") | | (KLHST_HWINV_STORAGE_NAME="comp")(KLHST_HWINV_STORAGE_DESCR="descr") | | (KLHST_HWINV_STORAGE_MANUF="man name")(KLHST_HWINV_STORAGE_SERIALNUM="111222333") | | (KLHST_HWINV_STORAGE_INVNUM="222333")(KLHST_HWINV_STORAGE_USERNAME="user") | | (KLHST_HWINV_STORAGE_PLACEMENT="room") | | (&(KLHST_HWINV_STORAGE_DISKSIZE>=1)(KLHST_HWINV_STORAGE_DISKSIZE<=2)) | | (&(KLHST_HWINV_STORAGE_MEMSIZE>=1)(KLHST_HWINV_STORAGE_MEMSIZE<=2)) | | (&(KLHST_HWINV_CPU_SPEED>=1)(KLHST_HWINV_CPU_SPEED<=100)) | | (&(KLHST_HWINV_CPU_THREADS>=1)(KLHST_HWINV_CPU_THREADS<=3)))" | +---Hsdp (paramParams) - HSDP subcontainer | | +---HsdpStatuses = (paramString)"KES/10.3.0.0/CDA747748CFC45FA85CB417FB744D707;KES/10.3.0.0/94CC2E816105465781EED0ED67610AD8;" - HSDP statuses divided by ";". See KLHST_WKS_HSDP_REASON | | +---Query = (paramString)"(|(KLHST_WKS_HSDP_REASON="KES/10.3.0.0/CDA747748CFC45FA85CB417FB744D707") | | (KLHST_WKS_HSDP_REASON="KES/10.3.0.0/94CC2E816105465781EED0ED67610AD8"))" | +---InventoryAppPageSettings (paramParams) - Third party product inventory subcontainer. (See InvSrvViewName and InventoryApi) | | +---InventoryTags = (paramString)"11" - Application tag. Use in query KLHST_INVENTORY_INCLUDED_PRODUCT_TAG_NAME (Same as KLTAGS_TAG_VALUE and KLTAGS_INCLUDED_TAG_VALUE from InvSrvViewName) | | +---ExcludeInventoryTags = (paramBool)true - The parameter accepts true if hosts are searched where InventoryTags is set. | | +---InventoryProductName = (paramString)""AMD Catalyst Install Manager"" - Application name. If InventoryFindByUpdate = true then KLHST_INVENTORY_PATCH_NAME, otherwise KLHST_INVENTORY_PRODUCT_NAME | | +---InventoryDisplayVersion = (paramString)"1.22" - Application version. If InventoryFindByUpdate = true then KLHST_INVENTORY_PATCH_DISPLAY_VERSION, otherwise KLHST_INVENTORY_PRODUCT_DISPLAY_VERSION | | +---InventoryPublisher = (paramString)""Microsoft"" - Application publisher. If InventoryFindByUpdate = true then KLHST_INVENTORY_PATCH_PUBLISHER, otherwise KLHST_INVENTORY_PRODUCT_PUBLISHER | | +---InventoryFindByUpdate = (paramBool)false - The parameter accepts true if search will be by application update, otherwise - by application | | +---InventoryInstalled = (paramBool)true - The parameter accepts true if hosts with installed application or update are searched. | | | When searched by absent application it is needed to use KLHST_INVENTORY_INCLUDED_PRODUCT_NAME (or KLHST_INVENTORY_INCLUDED_PATCH_NAME for | | | InventoryFindByUpdate). And the value for this attribute is created from values InventoryProductName, InventoryDisplayVersion, InventoryPublisher by next | | | schema: ("value of InventoryProductName with double quotes")("value of InventoryDisplayVersion with double quotes")("value of InventoryPublisher with | | | double quotes"). For example: KLHST_INVENTORY_INCLUDED_PRODUCT_NAME <> "("AMD Catalyst Install Manager")("1.22")("Microsoft")". | | +---CompetitorProductName = (paramString)"Ashampoo FireWall" - Name of incompatible application. KLHST_WKS_COMPETITOR_PRODUCT_NAME (List of possible values can be get from field INIFILE_PRODUCT_NAME from list of | | | cleaner initialization files that returned by InventoryApi::GetSrvCompetitorIniFileInfoList) | | +---Query = (paramString)"(&(KLHST_INVENTORY_PRODUCT_NAME="""AMD Catalyst Install Manager""") | | (KLHST_INVENTORY_PRODUCT_DISPLAY_VERSION="1.22") | | (KLHST_INVENTORY_PRODUCT_PUBLISHER="""Microsoft""") | | (KLHST_INVENTORY_INCLUDED_PRODUCT_TAG_NAME<>"11"))" | +---NetInfoExPageSettings (paramParams) - Network information subcontainer | | +---FoundLastNDays = (paramInt)2 - Computer discovery period (days). See KLHST_WKS_CREATED | | +---HostIsUA = (paramInt)1 - Computer is UpdateAgent. See HST_HAS_UPDATE_AGENT | | +---HostKeepConn = (paramInt)1 - Computer has "Keep connection" flag set. See KLHST_WKS_KEEP_CONNECTION | | +---Alien = (paramInt)1 - Computer is controlled by other Administration Server. See KLHST_MANAGED_OTHER_SERVER. Values: 0 - ignored, 1 - Yes, 2 - No. | | +---Query = (paramString)"(&(HST_HAS_UPDATE_AGENT<>0)(KLHST_WKS_KEEP_CONNECTION<>0) | | | (&(KLHST_WKS_LAST_NAGENT_CONNECTED>=T"2017-8-3 13:56:26") | | | (KLHST_WKS_LAST_NAGENT_CONNECTED<=T"2017-8-3 16:56:26")) | | | (KLHST_WKS_CREATED>=CURTIME(-172800))(KLHST_WKS_STATUS&32<>0) | | | (KLHST_WKS_STATUS&1<>0)(KLHST_MANAGED_OTHER_SERVER<>0))" | | +---RoamingStatus = (\ref kloapi_type_paramInt)1 - Roaming status. Placed in query as \ref ak_hst_attributes "KLHST_WKS_STATUS" & 32 | | +---Visible = (\ref kloapi_type_paramInt)1 - Visible status. Placed in query as \ref ak_hst_attributes "KLHST_WKS_STATUS" & 1 | | +---lct_from = (\ref kloapi_type_paramDateTime)03-08-2017 13:56:00 - Computer Last connection time range (from). See \ref ak_hst_attributes "KLHST_WKS_LAST_NAGENT_CONNECTED" | | +---lct_to = (paramDateTime)03-08-2017 16:56:00 - Computer Last connection time range (to) | | +---lct_days = (paramInt)3 - Computer Last connection time in form of "days past for now". If lct_days != 0 then lct_from and lct_to ignored. See KLHST_WKS_LAST_NAGENT_CONNECTED | | | +---NetInfoPageSettings (paramParams) - General network information subcontainer | | +---Comment = (paramString)"comment" - See KLHST_WKS_COMMENT and KLINCDT_BODY | | +---DomainName = (paramString)"domain" - See KLHST_WKS_WINDOMAIN | | +---HostGroup = (paramString)"group" - KSC Group name | | +---HostName = (paramString)"*" - See KLHST_WKS_DN, KLHST_WKS_WINHOSTNAME and KLHST_WKS_DNSNAME | | +---IPFrom = (paramInt)1 - Computers IP range (from). See KLHST_WKS_IP_LONG | | +---IPTo = (paramInt)2 - Computers IP range (to) | | +---Query = (paramString)"(&(|(KLHST_WKS_DN="*")(KLHST_WKS_WINHOSTNAME="*")(KLHST_WKS_DNSNAME="*")) | | (name="group")(KLHST_WKS_WINDOMAIN="domain") | | (|(KLHST_WKS_COMMENT="comment")(KLINCDT_BODY="comment")) | | (&(KLHST_WKS_IP_LONG>=1)(KLHST_WKS_IP_LONG<=2)))" | | | +---OsPageSettings (paramParams) - OS subcontainer | | +---CpuArch = (paramInt)3 - See Process Architecture enum and KLHST_WKS_CPU_ARCH | | +---OsSp = (paramString)"1.2" - OS Service pack version (X.Y). See KLHST_WKS_OS_VER_MAJOR, KLHST_WKS_OS_VER_MINOR | | +---OsVerType (paramArray) - OS Version type. See KLHST_WKS_CTYPE | | | +---0 = (paramInt)21 - See OS Version Indices | | | +---1 = (paramInt)13 - See Platform Type enum | | | +---2 = (paramInt)19 - See Windows Network Host Type enum | | +---OsBuild=(INT)16233 - OS Build number (KLHST_WKS_OS_BUILD_NUMBER=16233) | | +---OsBuildCond=(INT)0 - OS Build number comparison condition (0-equal, 1-not equal, 2-greater, 3-less) | | +---OsRelease=(INT)1700 - OS Release ID (KLHST_WKS_OS_RELEASE_ID<>1700) | | +---OsReleaseCond=(INT)1 - OS Release ID comparison condition (0-equal, 1-not equal, 2-greater, 3-less) | | +---Query = (paramString)"(&(|(KLHST_WKS_PTYPE=12)(KLHST_WKS_PTYPE=6)(KLHST_WKS_PTYPE=10)) | | (&(KLHST_WKS_OSSP_VER_MAJOR=1)(KLHST_WKS_OSSP_VER_MINOR=2)) | | (KLHST_WKS_CPU_ARCH=3))" | | | +---PCSPageSettings (paramParams) - Product components statuses (PCS) subcontainer | | +---Csp = (paramInt)3 - See KLHST_WKS_COLLAB_SRVS_STATUS | | +---Cspcond = (paramInt)0 - Status condition (0 - "=", 1 - "<>") | | +---Dlp = (paramInt)0 - See KLHST_WKS_DLP_STATUS | | +---Dlpcond = (paramInt)1 - Status condition (0 - "=", 1 - "<>") | | +---Eas = (paramInt)9 - See KLHST_WKS_EMAIL_AV_STATUS | | +---Eascond = (paramInt)0 - Status condition (0 - "=", 1 - "<>") | | +---Edr = (paramInt)4 - See KLHST_WKS_EDR_STATUS | | +---Edrcond = (paramInt)1 - Status condition (0 - "=", 1 - "<>") | | +---Query = (paramString)"(&(KLHST_WKS_DLP_STATUS<>0)(KLHST_WKS_COLLAB_SRVS_STATUS=3) | | (KLHST_WKS_EMAIL_AV_STATUS=9)(KLHST_WKS_EDR_STATUS<>4))" | | | +---ProtectionPageSettings (paramParams) - Protection Settings subcontainer | | +---HostStatusDescr (paramArray) - See Host State enum | | | +---0 = (paramInt)1 | | | +---1 = (paramInt)2 | | +---Query = (paramString)"(&(&(KLHST_WKS_STATUS_ID=1)(KLHST_WKS_FROM_UNASSIGNED=0)) | | | (KLHST_WKS_RTP_STATE=4) | | | (|(KLHST_WKS_STATUS_MASK_0<>0)(KLHST_WKS_STATUS_MASK_1<>0)))" | | +---RtpStatusId = (\ref kloapi_type_paramInt)4 - Rtp Status. See Global RTP State below. See \ref ak_hst_attributes "KLHST_WKS_RTP_STATE" | | +---StatusId = (\ref kloapi_type_paramInt)1 - Computer Status. See Computer Status below. See \ref ak_hst_attributes "KLHST_WKS_STATUS_ID". If StatusId == 0 (OK) then query must be combined by AND with | | "KLHST_WKS_FROM_UNASSIGNED=0" condition | +---UsersPageSettings (paramParams) - User information subcontainer | | +---CurUserId = (paramString)"602D928CDDB0D642ABB4F3E2B18CD3CB" - Currently logged in user ID. See KLHST_WKS_SESSION_USER_BINID | | +---Query = (paramString)"(&(KLHST_WKS_SESSION_USER_BINID=0x602D928CDDB0D642ABB4F3E2B18CD3CB) | | | (KLHST_WKS_USER_BINID=0x1E3C37059125724F89FD41663793F061))" | | +---UserId = (paramString)"1E3C37059125724F89FD41663793F061" - Logged in user ID. See KLHST_WKS_USER_BINID | | | +---VDIPageSettings (paramParams) - VDI subcontainer | | +---PartVDI = (paramInt)1 - Part of VDI infrastructure (<>0 - yes, =0 - no). See HST_VM_VDI | | +---Query = (paramString)"(&(HST_VM_TYPE<>2)(HST_VM_TYPE<>0)(HST_VM_VDI<>0)(HST_VM_TYPE=4))" | | +---VM = (paramInt)1 - Is VM (0 - Ignore, 1 - yes, 2 - no) | | +---VMType = (paramInt)4 - Type of VM. See KLSTD::VmDetected. See HST_VM_TYPE | | | +---VapmPageSettings (paramParams) - VAPM subcontainer | | +---Query = (paramString)"(&(KLHST_WUA_SWITCHED<>0))" | | +---WUA_SWITCHED = (paramInt)1 - Is WUA switched to KSC on host (0 - Ignore, 1 - yes, 2 - no). See KLHST_WUA_SWITCHED | | | +---TagsPageSettings (paramParams) | | +---HostTags = (paramString)"Tag1\r0\nTag2\r1\n" - List of selected tags delimited by "\n". Each tag has format: "[tag name]\r[1-tag is included or 0-tag is excluded]" | | +---OrHostTags = (paramBool)true - The parameter accepts true if group tags by OR else group tags by AND | | +---Query = (paramString)"(|(KLHST_INCLUDED_WKS_TAG_NAME="aaaa")(KLHST_INCLUDED_WKS_TAG_NAME<>"bbbb"))" | | | +---PRODCOMPS (paramParams) | | +---PRODCOMPS_COMPS = (paramString)"ConnProd/1.0.0.0/59C431F07D5C4633AC7BFCB569A2B394;ConnProd/1.0.0.0/7275439F21EE4C799A1A6EF02CF53920;" - Product components list in format "[comp1];[comp2];" where [compN] in format "[prod_name]/[prod_version]/[componentId]". Query string is "(&(KLHST_PRCST_PRODUCT_NAME="ConnProd")(KLHST_PRCST_PRODUCT_VERSION="1.0.0.0")(KLHST_PRCST_COMPONENT_ID=0x59C431F07D5C4633AC7BFCB569A2B394))". See KLHST_PRCST_PRODUCT_NAME, KLHST_PRCST_PRODUCT_VERSION, KLHST_PRCST_COMPONENT_ID | | +---PRODCOMPS_COMPS_STATUS = (paramInt)0 - Component status. If value is -1 then status not set. See KLHST_PRCST_COMPONENT_STATUS | | +---PRODCOMPS_COMPS_VER = (paramString)"22" - Component version. See KLHST_PRCST_COMPONENT_VERSION | | +---PRODCOMPS_COMPS_VER_COND = (paramInt)0 - Component version condition (0-equal, 1-not equal, 2-greater, 3-less) | | +---Query = (paramString)"(|(&(KLHST_PRCST_PRODUCT_NAME="ConnProd")(KLHST_PRCST_PRODUCT_VERSION="1.0.0.0")(KLHST_PRCST_COMPONENT_ID=0x59C431F07D5C4633AC7BFCB569A2B394)(KLHST_PRCST_COMPONENT_STATUSKLHST_PRCST_COMPONENT_STATUS=0)(KLHST_PRCST_COMPONENT_VERSION=22))(&(KLHST_PRCST_PRODUCT_NAME="ConnProd")(KLHST_PRCST_PRODUCT_VERSION="1.0.0.0")(KLHST_PRCST_COMPONENT_ID=0x7275439F21EE4C799A1A6EF02CF53920)(KLHST_PRCST_COMPONENT_STATUS=0)(KLHST_PRCST_COMPONENT_VERSION=22)))" | | | +---AllHsdp (paramParams) | | +---HsdpStatuses = (paramString)"ConnProd/1.0.0.0/59C431F07D5C4633AC7BFCB569A2B394;KES/11.0.0.0/CDA747748CFC45FA85CB417FB744D707;KES/10.3.0.0/CDA747748CFC45FA85CB417FB744D707;" - Product HSDP statuses list in format "[status1];[status2];" where [statusN] in format "[prod_name]/[prod_version]/[statusId]". Query string is "(KLHST_WKS_HSDP_ALLREASONS="ConnProd/1.0.0.0/59C431F07D5C4633AC7BFCB569A2B394")" See KLHST_WKS_HSDP_ALLREASONS | | +---Query = (paramString)"(|(KLHST_WKS_HSDP_ALLREASONS="ConnProd/1.0.0.0/59C431F07D5C4633AC7BFCB569A2B394")(KLHST_WKS_HSDP_ALLREASONS="KES/11.0.0.0/CDA747748CFC45FA85CB417FB744D707")(KLHST_WKS_HSDP_ALLREASONS="KES/10.3.0.0/CDA747748CFC45FA85CB417FB744D707"))" | | | +---cloud_page_settings (paramParams) - Cloud subcontainer | +---Query = (paramString)"(&(KLHST_CLOUD_CONTAINER_GP=0x00000000000000000000000000000000)(KLHST_CLOUD_HOST_TYPE=2))" | +---cloud_id = (paramString)"00000000000000000000000000000000" - Cloud container ID. See KLHST_CLOUD_CONTAINER | +---cloud_type = (paramInt)2 - Cloud type. See Cloud Type enum and KLHST_CLOUD_HOST_TYPE | +---search_in_subclouds = (paramBool)true - Search in cloud subcontainers. See KLHST_CLOUD_CONTAINER_GP +---Query = (paramString)"(&(&(&(KLHST_WKS_AV_BASES_DATE>=T"2017-8-3 12:57:47")(KLHST_WKS_AV_BASES_DATE<=T"2017-8-3 13:57:47")) | (&(KLHST_WKS_AV_BASES_RECORDS>=1)(KLHST_WKS_AV_BASES_RECORDS<=2000000000)) | (&(KLHST_WKS_LAST_FULLSCAN>=T"2017-8-3 13:57:47")(KLHST_WKS_LAST_FULLSCAN<=T"2017-8-3 14:57:47")) | (&(KLHST_WKS_VIRUS_COUNT>=1)(KLHST_WKS_VIRUS_COUNT<=1000000))) | (&(&(KLHST_WKS_PRODUCT_NAME="1103")(KLHST_WKS_PRODUCT_VERSION="1.0.0.0")) | (KLHST_WKS_PRODUCT_DISPLAY_VERSION="1.0") | (KLHST_HF_DN="upd")(&(KLHST_WKS_LAST_UPDATE>=T"2017-8-3 12:56:55") | (KLHST_WKS_LAST_UPDATE<=T"2017-8-3 13:56:55")) | (KLHST_WKS_STATUS&4<>0)(KLHST_WKS_STATUS&16<>0)) | (&(KLHST_WKS_DPE_ALGORITHM="AES192")) | (&(KLHST_HWINV_DEVICE_NAME="dev")(KLHST_HWINV_DEVICE_MANUFACTURER="man")(KLHST_HWINV_STORAGE_NAME="comp") | (KLHST_HWINV_STORAGE_DESCR="descr")(KLHST_HWINV_STORAGE_MANUF="man name") | (KLHST_HWINV_STORAGE_SERIALNUM="111222333")(KLHST_HWINV_STORAGE_INVNUM="222333") | (KLHST_HWINV_STORAGE_USERNAME="user")(KLHST_HWINV_STORAGE_PLACEMENT="room") | (&(KLHST_HWINV_STORAGE_DISKSIZE>=1)(KLHST_HWINV_STORAGE_DISKSIZE<=2)) | (&(KLHST_HWINV_STORAGE_MEMSIZE>=1)(KLHST_HWINV_STORAGE_MEMSIZE<=2)) | (&(KLHST_HWINV_CPU_SPEED>=1)(KLHST_HWINV_CPU_SPEED<=100)) | (&(KLHST_HWINV_CPU_THREADS>=1)(KLHST_HWINV_CPU_THREADS<=3))) | (|(KLHST_WKS_HSDP_REASON="KES/10.3.0.0/CDA747748CFC45FA85CB417FB744D707") | (KLHST_WKS_HSDP_REASON="KES/10.3.0.0/94CC2E816105465781EED0ED67610AD8")) | (&(KLHST_INVENTORY_PRODUCT_NAME="""AMD Catalyst Install Manager""") | (KLHST_INVENTORY_PRODUCT_DISPLAY_VERSION="1.22")(KLHST_INVENTORY_PRODUCT_PUBLISHER="""ActiveState""") | (KLHST_INVENTORY_INCLUDED_PRODUCT_TAG_NAME<>"11")) | (&(HST_HAS_UPDATE_AGENT<>0)(KLHST_WKS_KEEP_CONNECTION<>0) | (&(KLHST_WKS_LAST_NAGENT_CONNECTED>=T"2017-8-3 13:56:26") | (KLHST_WKS_LAST_NAGENT_CONNECTED<=T"2017-8-3 16:56:26")) | (KLHST_WKS_CREATED>=CURTIME(-172800))(KLHST_WKS_STATUS&32<>0)(KLHST_WKS_STATUS&1<>0)) | (KLHST_WKS_DN="*") | (&(|(KLHST_WKS_PTYPE=12)(KLHST_WKS_PTYPE=6)(KLHST_WKS_PTYPE=10)) | (&(KLHST_WKS_OSSP_VER_MAJOR=1)(KLHST_WKS_OSSP_VER_MINOR=2))(KLHST_WKS_CPU_ARCH=3)) | (&(KLHST_WKS_DLP_STATUS<>0)(KLHST_WKS_COLLAB_SRVS_STATUS=3)(KLHST_WKS_EMAIL_AV_STATUS=9) | (KLHST_WKS_EDR_STATUS<>4)) | (&(&(KLHST_WKS_STATUS_ID=1)(KLHST_WKS_FROM_UNASSIGNED=0))(KLHST_WKS_RTP_STATE=4) | (|(KLHST_WKS_STATUS_MASK_0<>0)(KLHST_WKS_STATUS_MASK_1<>0))) | (&(KLHST_WKS_SESSION_USER_BINID=0x602D928CDDB0D642ABB4F3E2B18CD3CB) | (KLHST_WKS_USER_BINID=0x1E3C37059125724F89FD41663793F061)) | (&(HST_VM_TYPE<>2)(HST_VM_TYPE<>0)(HST_VM_VDI<>0)(HST_VM_TYPE=4)) | (&(KLHST_WUA_SWITCHED<>0)) | (&(KLHST_CLOUD_CONTAINER_GP=0x00000000000000000000000000000000)(KLHST_CLOUD_HOST_TYPE=2)))" - Full query string +---QueryVer = (paramInt)2