/
Top10AlertsPieChart
TrafficToPublicInternet
InternetTrafficVolume
TrafficOverVNCorRDP
ProtocolTrafficSums
TrafficByProtocolFunctionCode
TrafficBlockedByFirewall
TrafficCrossingPurdueLevels
ActiveICMPTraffic
UnresolvedCVEsonAsset
CVEsOveraMonthOld
TrendTotalUnresolvedVulnsOverTime
MitreATTCKTactics
AlertsBySpecificTime
NewAssetsOver7Days
VulnsByDevice
PossibleMultihomedAssets
AssetsPerSubnet
LicencesByAppliance
TrafficBetweenTwoZones
alerts
appliances
assertions
assets
audit_log
captured_files
captured_logs
captured_urls
cpe_items
cve_files
dhcp_leases
function_codes
health_log
link_events
links
microsoft_hotfixes
node_cpe_changes
node_cpes
node_cves
node_points
node_points_last
nodes
packet_rules
protocol_connections
report_files
report_folders
sessions
sessions_history
sigma_rules
sp_executions
sp_node_executions
stix_indicators
subnets
threat_models
trace_requests
variable_history
variables
yara_rules
zone_links
zones
==
!=
>
>=
<
<=
include?
in?
==
!=
>
>=
<
<=
include?
in?
✕
—
—
—
Nozomi Networks technical documentation — Queries: data sources, basic operators, commands, functions
NozomiNetworks/query_library — 20 Queries video series (25.x)
Nozomi Networks Open API — Query endpoint