Patch Queries and Default Queries

• 3 min to read •

Queries and default queries allow you to create sets of Patches for your convenience.

Patch queries allow the dynamic grouping of patches according to a certain specified criterion. The list is updated over time as new patches that meet the specified condition are released.

System Rules (named Default Queries in the console) are the most widely used system queries that are preset and can't be changed.

Important Information

Boolean logic-based selection makes the selection of patches very easy and dynamic for Syxsense customers.

Default Queries are 'built-in' dynamic patch groups that are provided for our customers' convenience.

Both Patch Queries and Default Queries can be used when targeting patch deployments.

Prerequisites

A device in the console A user with Admin, Vulnerabilities (Patch Manager), or Patch Queries rights

Discovery: Patch QueriesDiscovery: Patch Queries

Query Designer	Edit your query or create a new one. In Vulnerabilities section go to Queries and click The Query Designer will open. Find the list of options below.Drop-down TitleDrop-down Title
	Previews query results (does not automatically save the query)
	Exports the query logic
	Saves changes
	Cancels changes since the last time the query was saved
Name	A name of the query
	Checkboxes for Patches or Security scans to return only the specific content
Description	A useful description of the query
	The query is aimed to dynamically group the Top X patches
	Used to add an additional calculation into the query. A new line can be entered anywhere in your query structure.
	Used to remove a specific calculation from the query. Calculations that are part of a group will need to be ungrouped first.
	This is used in conjunction with the grouping feature. If you place the tick of your calculation, you can join them together by using the join button
	This is used to join previously selected lines of your calculation. At least two lines must be selected before this join feature will activate
	When creating your calculation, you may use 'And/Or' logic to enable flexibility where required
Field	By default, you may display select patch details to dynamically group patches based on them by pressing the down arrow.
Operator	The operator allows specific or multiple selective calculations to be created
Value	By default, you may display values from the database by pressing the down arrow or if you know the value you want to search for you may enter it manually

Discovery: Default Queries (Vulnerabilities)Discovery: Default Queries (Vulnerabilities)

Default Queries (Vulnerabilities)	Built-in default queries make the dynamic selection of patches super easy. From dynamically selecting all Patch Tuesday patches to all Critical Patches, default queries make patch selection completely automated. Default queries cannot be edited
3rd Party Updates	All third-party vendors in the patch database
All Security Scans	All security scans in the patch database
All Vulnerabilities	All vulnerabilities in the patch database
Critical Patches	All CVSS Critical severity rated vulnerabilities
Detected Patches	All detected patches
Detected Security Issues	All detected security issues
Flash	All Flash third-party updates
Java	All Oracle Java updates
Microsoft Patch Tuesday	All Microsoft updates released the previous Patch Tuesday. This list is reset on the morning of Patch Tuesday.
Ready to Resolve Security Issues	Security issues that can be resolved
Top 10 Patches Ready to Install	The highest severity vulnerabilities detected, sorted by CVSS severity in descending order

Video Tutorials: Create Patch QueryVideo Tutorials: Create Patch Query

Video Watch an example of creating new Patch Query

Video Patch Query Example: Severity rating

Video Patch Query Example: Publish date

Video Patch Query Example: No Java updates

Video Patch Query Example: If Reboot required

Video Patch Query Example: CVSS score and Weaponized status

Video Patch Query Example: Browser updates

Last Update: July, 2024