Search | Query syntax | Outgoing feed inclusion#

Outgoing feeds are indexed as destinations. You can search Entities and Observables by their inclusion on specific Outgoing fields

Search for entities and observables published through an outgoing feed based on the feed name, type, or ID.

Query key

Description

Example

destinations.name

Outgoing feed name.

destinations.name: "Poll TAXII Stand"

Note

destinations.name is only set when an entity is packed for an outgoing feed. It is not updated when the name of that outgoing feed is changed, only when it is re-packed. This can result in entities not carrying the updated name of the outgoing feed it belongs to.

destinations.type

Outgoing feed transport type.

destinations.type: "TAXII Poll"

destinations.id

(Deprecated. Search using destinations.name instead.)

destinations.name: "Poll TAXII Stand"