> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Search

Get search results for a given Armis Standard Query (ASQ) search string.

## Parameters

<div className="integrations-table">
  | Parameter           | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
  | ------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
  | ASQ Search String   | The Armis Standard Query (ASQ) search string to search by.<br /><br />Every query string should begin with a search type indicating what the search is for. Valid search types include:<br />\* `in:alerts`<br />\* `in:applications`<br />\* `in:businessApplications`<br />\* `in:connections`<br />\* `in:devices`<br />\* `in:operatingSystems`<br />\* `in:riskFactors`<br />\* `in:services`<br />\* `in:traffic`<br />\* `in:users`<br />\* `in:vulnerabilities`<br />\* `in:activity`<br /><br />Example: `in:devices after:2022-03-10 before:2023-05-15` |
  | Fields              | A comma-separated list of fields to include in the response.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
  | Include Total Count | Select to get the total count of matching results.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
  | Order By            | A comma-separated list of fields to sort results by.<br /><br />The default sort is ascending. Use `:desc` suffix for descending order (e.g., `lastSeen:desc`).<br /><br />For example:<br />\* `lastSeen:desc`<br />\* `lastSeed` (ascending order)                                                                                                                                                                                                                                                                                                              |
  | Page Size           | The maximum number of results to return per request.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |
  | Return All Pages    | Automatically fetch all resources, page by page.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
  | Starting Index      | The index of the first result to return, used for pagination.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
  | Timezone            | The timezone to use when executing the query.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
</div>

## Example Output

```json theme={"dark"}
{
	"data": {
		"results": [
			{
				"activityUUID": "sBEbYGsBAAAAAABkzx4s",
				"title": "e0553d490 performed DNS query to domain 'abc-ssl.xyz.com'",
				"content": "Resolved IPs: 152.101.26.236",
				"type": "Dns Query",
				"protocol": "Wifi",
				"sensor": {
					"name": "0c:8d:db:b2:61:3e"
				},
				"time": "2019-03-06T13:08:53.016075+00:0",
				"deviceIds": [
					1475,
					1498
				],
				"connectionIds": [
					1599,
					9804
				]
			}
		]
	},
	"success": true
}
```

## Workflow Library Example

[Search with Armis Centrix and Send Results Via Email](https://library.blinkops.com/workflows/search-with-armis-centrix-and-send-results-via-email)

<div className="iframe-wrapper">
  <div className="iframe-media">
    <img src="https://mintcdn.com/blinkops-2/ojHYuDeYX5FWuN8a/img/Icons/play-box.svg?fit=max&auto=format&n=ojHYuDeYX5FWuN8a&q=85&s=b8af968e71438a9499c3223c9bd29fb2" alt="Workflow Library" width="16" height="16" data-path="img/Icons/play-box.svg" />

    Preview this Workflow on desktop
  </div>

  <iframe className="iframe" src="https://library.blinkops.com/workflows/search-with-armis-centrix-and-send-results-via-email/canvas" />
</div>
