Execute an advanced Feed Scanner search

New
  • Published on Apr 14, 2025
  • 1 minute(s) read
Prev Next

Advanced Feed Scanner searches are executed using SPQL command line syntax.

  1. Navigate to Threat Intelligence Management > Feed Scanner
  2. Select the Advanced Search tab
  3. Specify a query using the correct syntax (including spaces between elements) and supported field names
  4. To specify a Sort order, use the drop down menu or type a field name
  5. (Optional) Use the Reset button to clear all parameters
  6. Hit Enter or click the blue icon to the right

Editing parameters

Once the scan is complete, search parameters are collapsed and results are populated underneath.

  1. To edit the query parameters click the Edit Feed Scanner Search Form button
  2. Make the required amendments
  3. To re-run the query, click the blue arrow icon on the right, or hit Enter

Saving queries

  1. Enter a valid set of parameters in the Query box
  2. Click the Save button on the top right
  3. Enter a Search Name
  4. (Optional) Enter a Description
  5. (Optional) Enter a Tags that will classified your saved searches
  6. (Optional) Reordered columns can be save by checking the Save column headers with the query box
  7. Click Save