Developers

Expressions


Syntax

Use expressions with operators to operate on constants, paths, or the results of functions. The possible elements of an expression include:

expression ::= INTEGER
expression ::= FLOAT
expression ::= STRING
expression ::= NULL
expression ::= path
expression ::= path @ 'time'
expression ::= function
expression ::= ( expression )
expression ::= expression + expression
expression ::= expression - expression
expression ::= expression * expression
expression ::= expression / expression
expression ::= expression ** expression
expression ::= expression % expression
expression ::= expression || expression
expression ::= expression
expression ::= expression & expression
expression ::= expression | expression
expression ::= expression ^ expression
expression ::= expression << expression
expression ::= expression >> expression

Description

PQL expressions are subcomponents of other commands. An expression can be an integer, float, string, null, path, path with time, function, an expression within parentheses, etc.


Examples


Running Processes over 10 Mg

This query uses a greater-than expression in the predicate to search for information about running processes where the workingsetsize is greater than 10000000 bytes.

select name,workingsetsize 
from /network/device/wmi/win32_process 
where workingsetsize > 10000000
row
   name services.exe
   workingsetsize 13156352 Bytes
row
   name svchost.exe
   workingsetsize 18325504 Bytes
row
   name pbeagent.exe
   workingsetsize 18300928 Bytes 
   . . .

Running Processes under 10 Mg

This query uses a less-than expression in the predicate to search for information about running processes where the workingsetsize is less than 10000000 bytes.

select name,workingsetsize 
from /network/device/wmi/win32_process 
where workingsetsize < 10000000
row
   name System Idle Process
   workingsetsize 16384 Bytes
row
   name System
   workingsetsize 249856 Bytes
row
   name smss.exe
   workingsetsize 262144 Bytes  
   . . .

How do I find out more?