quaxar-asm-seeds

Get the list of seeds registered as the basis of attack surface discovery in the S2W Quaxar ASM service.

Syntax

quaxar-asm-seeds [profile=STRING] [state=STRING] [value=STRING] [types=STRING] [note=BOOL] [orgs=STRING] [sorts=STRING] [duration=STRING] [from=STRING] [to=STRING] [pretty=BOOL]

Options

profile=STRING: Optional. QUAXAR connect profile code. If omitted, an available profile is used automatically.
state=STRING: Optional. Filter by seed state. Allowed values: MONITORING, REMOVED (default: MONITORING).
value=STRING: Optional. Seed value keyword to search.
types=STRING: Optional. Comma-separated seed types to filter. Allowed values: IP, DOMAIN, CIDR.
note=BOOL: Optional. Set t to filter seeds with notes.
orgs=STRING: Optional. Comma-separated customer organization names.
sorts=STRING: Optional. Sort order. Allowed values: added_time_desc, added_time_asc.
duration=STRING: Optional. Scan only recent data. Use s(second), m(minute), h(hour), d(day), mon(month) time unit. e.g. 7d.
from=STRING: Optional. Start time of range in yyyyMMddHHmmss format. If you omit the time part, it is padded by zero.
to=STRING: Optional. End time of range in yyyyMMddHHmmss format. Cannot be used alone; specify with from or duration.
pretty=BOOL: Optional. Set t to enable pretty print with line breaks (default: f).

Output fields

Field	Type	Name	Description
profile	string	Connect profile	Profile name of QUAXAR
seed_id	string	Seed ID	Seed unique ID
seed_type	string	Seed type	IP, DOMAIN or CIDR
value	string	Value	Seed value
added	date	Added	Seed registration time
removed	date	Removed	Seed removal time
scan_status	string	Scan status	Seed scan status
overlap	boolean	Overlap	Overlapped seed or not
notes	string	Notes	Seed note list (JSON)

Error codes

Parsing errors

Error message	Cause	Resolution
Specify valid Quaxar profile.	Invalid profile in the profile option	Specify a valid Quaxar connect profile code
No available Quaxar profile found.	No Quaxar connect profile registered	Register a Quaxar connect profile first
Invalid state. Available states are MONITORING, REMOVED.	Disallowed value in state	Specify MONITORING or REMOVED
Invalid types. Available seed types are IP, DOMAIN, CIDR.	Disallowed seed type in types	Specify one of IP, DOMAIN, CIDR
Invalid sorts. Available sorts are added_time_desc, added_time_asc.	Disallowed value in sorts	Use one of the allowed sort orders
Invalid duration. Use s(second), m(minute), h(hour), d(day), mon(month) time unit. (e.g. 7d)	Malformed duration	Use the specified time unit format
Specify from or duration option.	to specified without from or duration	Specify from or duration with to

Runtime errors

Error message	Cause	Resolution
quaxar asm api error: status=..., message=...	ASM API returned an error state	Check profile permission and ASM service

Description

quaxar-asm-seeds is a source command that iterates the list of seeds (starting points of attack surface discovery) registered in Quaxar ASM page by page, emitting each seed as a row. Seeds are registered as IP, domain, or CIDR, and the seed_id obtained from this list is used as input for the quaxar-asm-seed-remove-batch command.

The default value of the state option is MONITORING, so specify state=REMOVED to view removed seeds. The notes field is returned as a JSON string.

Examples

Example: Review monitoring seeds by newest registration

Situation: You want to review currently monitored seeds ordered by most recent registration to inspect the latest entries.

quaxar-asm-seeds state=MONITORING sorts=added_time_desc

Expected result:

seed_id	seed_type	value	scan_status	added
seed-1	DOMAIN	example.com	PROCESSING	2026-07-23 10:15:50
seed-2	CIDR	192.0.2.0/24	DONE	2026-07-20 08:02:11

Interpretation: The most recently registered seeds are sorted to the top. If a seed was registered by mistake, its seed_id can be passed to quaxar-asm-seed-remove-batch for removal.