Here are two examples of the same query - using both the Command Line, and the Constructor - that scans for IPs hosted in Japan, seen in the last 7 days.
1. Command Line query
Command Line queries are executed using SPQL syntax. Here's a breakdown of the syntax involved in the above query:
| Code | Role | Description |
|---|---|---|
scan_date |
Field name | The date the IP was scanned |
> |
Operator | Is greater than |
now-7d |
Value | The previous 7 days |
AND |
Separator | And the |
tld |
Field name | Top level domain |
= |
Operator | Is equal to |
jp |
Value | Japan |
2. Constructor query
Using the same parameters, the same query can also be executed using the Constructor feature.
As you can see, each collection of a single Field name, Operator and Value represents a self-contained Expression, linked together by the AND separator:
