Documentation for Open Vulnerability and Assessment Language (OVAL®)
Definition Type: Element
Name: wql
Namespace: http://oval.mitre.org/XMLSchema/oval-definitions-5#windows
Type: oval-def:EntityObjectStringType
Containing Schema: windows-definitions-schema.xsd
MinOccurs (1)
MaxOccurs (1)
Abstract
Documentation:
A WQL query used to identify the object(s) to test against. Any valid WQL query is usable with one exception, at most one field is allowed in the SELECT portion of the query. For example SELECT name FROM ... is valid, as is SELECT 'true' FROM ..., but SELECT name, number FROM ... is not valid. This is because the result element in the data section is only designed to work against a single field.
Collapse XSD Schema Diagram:
Drilldown into var_ref in schema oval-definitions-schema_xsd Drilldown into mask in schema oval-definitions-schema_xsd Drilldown into operation in schema oval-definitions-schema_xsd Drilldown into datatype in schema oval-definitions-schema_xsd Drilldown into var_check in schema oval-definitions-schema_xsd Drilldown into EntityObjectStringType in schema oval-definitions-schema_xsdXSD Diagram of wql in schema windows-definitions-schema_xsd (Open Vulnerability and Assessment Language (OVAL®))
Collapse XSD Schema Code: 
<xsd:element name="wql" type="oval-def:EntityObjectStringType">
    <xsd:annotation>
        <xsd:documentation>A WQL query used to identify the object(s) to test against. Any valid WQL query is usable with one exception, at most one field is allowed in the SELECT portion of the query. For example SELECT name FROM ... is valid, as is SELECT 'true' FROM ..., but SELECT name, number FROM ... is not valid. This is because the result element in the data section is only designed to work against a single field.</xsd:documentation>
        <xsd:appinfo>
            <sch:pattern id="wmiobjwql" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
                <sch:rule context="win-def:wmi_object/win-def:wql">
                    <sch:assert test="not(@datatype) or @datatype='string'">
                        <sch:value-of select="../@id" /> - datatype attribute for the wql entity of a wmi_object should be 'string'</sch:assert>
                </sch:rule>
            </sch:pattern>
        </xsd:appinfo>
    </xsd:annotation>
</xsd:element>
Collapse Child Attributes:
Name Type Default Value Use
datatype oval-def:datatype string Optional
operation oval-def:operation equals Optional
mask oval-def:mask false Optional
var_ref oval-def:var_ref Optional
var_check oval-def:var_check all Optional
Collapse Derivation Tree:
Documentation for Open Vulnerability and Assessment Language (OVAL®)

Generated using Liquid Studio - Developer Bundle 21.0.0.0