Check out the
headlines
headlines
Use expressions with operators
to operate on constants, paths, or the results
of functions. The possible elements of an
expression include:
expression |
::= |
INTEGER |
expression |
::= |
FLOAT |
expression |
::= |
STRING |
expression |
::= |
NULL |
expression |
::= |
path |
expression |
::= |
|
expression |
::= |
function |
expression |
::= |
( expression ) |
expression |
::= |
expression + expression |
expression |
::= |
expression - expression |
expression |
::= |
expression * expression |
expression |
::= |
expression / expression |
expression |
::= |
expression ** expression |
expression |
::= |
expression % expression |
expression |
::= |
expression || expression |
expression |
::= |
expression |
expression |
::= |
expression & expression |
expression |
::= |
expression | expression |
expression |
::= |
expression ^ expression |
expression |
::= |
expression << expression |
expression |
::= |
expression >> expression |
PQL expressions are subcomponents of other commands. An expression can be an integer, float, string, null, path, path with time, function, an expression within parentheses, etc.
This query uses a greater-than expression in the predicate to search for information about running processes where the workingsetsize is greater than 10000000 bytes.
select name,workingsetsize from /network/device/wmi/win32_process where workingsetsize > 10000000
row name services.exe workingsetsize 13156352 Bytes row name svchost.exe workingsetsize 18325504 Bytes row name pbeagent.exe workingsetsize 18300928 Bytes . . .
This query uses a less-than expression in the predicate to search for information about running processes where the workingsetsize is less than 10000000 bytes.
select name,workingsetsize from /network/device/wmi/win32_process where workingsetsize < 10000000
row name System Idle Process workingsetsize 16384 Bytes row name System workingsetsize 249856 Bytes row name smss.exe workingsetsize 262144 Bytes . . .