AQL usage examples

/i
/installation
/aql
/a
/user
/u
/machine
/m
/activetime/
/t
/suppresswarning
/sw
/delete
/export
/r
/role
/path
/format
/ticket
/k
Find Sessions Usage formats:
FindSessions /i=<installationName> /a=<AQL query>
FindSessions /i=<installationName> /u=<user or semi-colon-separated list of users> /m=<machine or semi-colon-separated list of machines> /t=<YYYY-MM-DD HH:MM:SS>
FindSessions /i=<installationName> /a=<AQL query> /{delete}
FindSessions /i=<installationName> /a=<AQL query> /export=<SessionList> /format=<html|htm|csv|pdf|xml> /sw /path=<folderPath>
FindSessions /i=<installationName> /a=<AQL query> /export=<SessionList|WashEvents|UnixCommand|UnixInput|UnixInputOutput> /sw /path=<folderPath>
FindSessions /i=<installationName> /a=<AQL query> /export=<UnixCommand|UnixInput\UnixInputOutput> /sw /path=<folderpath> /r="role1;role2" /"ticket1;ticket2"
Find Sessions: Usage examples without AQL:
FindSessions /i="DirectAudit" /user="user sample" /machine="machine sample" /activetime="2018-12-24 15:30:45"
FindSessions /i="DirectAudit" /user="maya;fred" /machine="KH-Win7;KH-Win8" /activetime="2018-12-24 15:30:45"
Find Sessions: Usage examples with AQL:
FindSessions /i="DirectAudit" /aql="1 time is in this week"
FindSessions /i="DirectAudit" /aql="1 module = \"Windows PowerShell\"\"" /delete
FindSessions /i="DirectAudit" /aql="1 text=\"dzdo\"\"" /export="UnixCommand" /path="folder path"
FindSessions /i="DirectAudit" /aql="1 inputcommand = \"dzdo*\"\"" /suppresswarning /export="UnixInputOutput" /path="folder path"
FindSessions /i="DirectAudit" /aql="1 sessionid=\"D108F7B2-F4FB-FB42-A6E7-A40454780690\"\"