> For the complete documentation index, see [llms.txt](https://docs.fusion.vectra.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.fusion.vectra.ai/network-query-language/nql-value-suggestions.md).

# NQL Keywords

Looking up NQL Keywords in Fusion When constructing NQL queries in the Fusion Portal, the list of both the available fields and values (when applicable) will automatically appear in a dropdown below t

### Looking up NQL Keywords in Fusion <a href="#looking-up-nql-keywords-in-fusion" id="looking-up-nql-keywords-in-fusion"></a>

When constructing NQL queries in the Fusion Portal, the list of both the available fields and values (when applicable) will automatically appear in a dropdown below the NQL search box under **Keywords**. .

![Example: dstgeo.countrycode description](https://1075194167-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F7upncbzIm3grJePXaOO9%2Fuploads%2Fgit-blob-2ef69ec68639401d548875ae5a900cf0348597f8%2Fd4bb3d79dc562accba2db087821e96d4d4234239cc0e37bf8999d8a633688894.png?alt=media)

Example: dstgeo.countrycode description

### Using NQL Keyword Auto-Complete Suggestions <a href="#using-nql-keyword-auto-complete-suggestions" id="using-nql-keyword-auto-complete-suggestions"></a>

When you enter a keyword in the NQL textbox, a list of valid values for that keyword will pop up if available. For example, all boolean fields will have true or false value suggestions. The values for fields in which the Fusion Portal can perform lookups will also have suggestions.

![Example: dstgeo.countrycode valid values and meaning](https://1075194167-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F7upncbzIm3grJePXaOO9%2Fuploads%2Fgit-blob-2f4d67769975909ac1e594806e702a5b7768d861%2Fa2905c595446952835e43a3698bc068173d920ba26d05dc35cd936f3f32eba8f.png?alt=media)

Example: dstgeo.countrycode valid values and meaning

### List of NQL Keyword Values with Auto-Complete Suggestions <a href="#list-of-nql-keyword-values-with-auto-complete-suggestions" id="list-of-nql-keyword-values-with-auto-complete-suggestions"></a>

#### Flow <a href="#flow" id="flow"></a>

```
dstas.number
dstas.org
dstgeo.continentcode
dstgeo.countrycode
dstipname (deprecated)
dstiprep.categories
dstname (deprecated)
dstowneras.number
dstowneras.org
dstport
dstportname (deprecated)
flowsrcname
labels.ip.name.src
labels.ip.name.dstseverity
labels.port.name
rules.plugins.name
rules.name
site
srcas.number
srcas.org
srcgeo.continentcode
srcgeo.countrycode
srcipname (deprecated)
srciprep.categories
srcowneras.number
srcowneras.org
srcport
srcportname (deprecated)
tags
```

#### Events <a href="#events" id="events"></a>

```
alerttype
algorithm
categories
dstportnames
dstports
flowsrcnames
ipinfo.as.number
ipinfo.as.org
ipinfo.geo.continentcode
ipinfo.geo.countrycode
ipinfo.iprep.categories
rules
severity
sites
srcportnames
srcports
tags
tdm.description
tdm.name
```

#### Audit <a href="#audit" id="audit"></a>

```
action
class
source
subclass
```

#### Block <a href="#block" id="block"></a>

```
active
adapter
algorithms
dstas.number
dstas.org
dstgeo.continentcode
dstgeo.countrycode
dstipname
dstiprep.categories
dstname
dstport
dstportname
plugin.description
plugin.name
protocol
rules
severity
srcas.number
srcas.org
srcgeo.continentcode
srcgeo.countrycode
srcipname
srciprep.categories
srcname
srcport
srcportname
```


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.fusion.vectra.ai/network-query-language/nql-value-suggestions.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
