Expressions

Syntax

Use expressions with operators to operate on constants, paths, or the results of functions. The possible elements of an expression include:

expression     ::=     INTEGER
expression 	::= 	FLOAT
expression 	::= 	STRING
expression 	::= 	NULL
expression 	::= 	path
expression 	::= 	path                          @ 'time'
expression 	::= 	function
expression 	::= 	( expression )
expression 	::= 	expression + expression
expression 	::= 	expression - expression
expression 	::= 	expression * expression
expression 	::= 	expression / expression
expression 	::= 	expression ** expression
expression 	::= 	expression % expression
expression 	::= 	expression || expression
expression 	::= 	expression
expression 	::= 	expression & expression
expression 	::= 	expression | expression
expression 	::= 	expression ^ expression
expression 	::= 	expression << expression
expression 	::= 	expression >> expression

Description

PQL expressions are subcomponents of other commands. An expression can be an integer, float, string, null, path, path with time, function, an expression within parentheses, etc.

Examples

You can run the following examples against your own data in the GoToAssist search field, or against fictitious data in the Query Sandbox:

Running Processes over 1 Gig
Running Processes under 1 Gig

Running Processes over 1 GIG

This query uses a greater-than expression in the predicate to search for information about running processes where the workingsetsize is greater than 1,000,000,000 bytes.

Query:

select name,workingsetsize 
from /network/device/wmi/win32_process 
where workingsetsize > 1000000000

Results:

row
   name System Idle Process
   workingsetsize 16384 Bytes
row
   name System
   workingsetsize 249856 Bytes
row
   name smss.exe
   workingsetsize 262144 Bytes  
   . . .

Running Processes under 1 GIG

This query uses a less-than expression in the predicate to search for information about running processes where the workingsetsize is less than 1,000,000,000 bytes.

Query:

select name,workingsetsize 
from /network/device/wmi/win32_process 
where workingsetsize < 1000000000

Results:

row
   name System Idle Process
   workingsetsize 16384 Bytes
row
   name System
   workingsetsize 249856 Bytes
row
   name smss.exe
   workingsetsize 262144 Bytes  
   . . .