> ## Documentation Index
> Fetch the complete documentation index at: https://docs.infrawatch.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Data Dictionary
> Searchable fields, types, operators, and result grain
Choose the result you want first, then use its field reference to build the
query. Only fields available through the public search API appear here.
IP attribution, exposure summaries, observation dates, tags, and nested
service fields.
Ports, protocols, banners, HTTP, TLS, fingerprints, and typed scan evidence.
Names, record types, answers, response codes, and observation dates.
Reports, sources, publication dates, and associated IP indicators.
## Dataset grain
| Dataset | One result represents | Use it for |
| ---------- | -------------------------------------- | ------------------------------------------------------ |
| `hosts` | An IP address with summarized services | Host context and exposure overviews |
| `services` | One observed network service | Ports, protocols, banners, HTTP, TLS, and fingerprints |
| `dns` | One observed DNS relationship | Forward and reverse passive-DNS pivots |
| `osint` | One intelligence report | Reports associated with an IP or topic |
## Read a field entry
Each leaf field documents:
* Its path and value type.
* The operators accepted by InfraQL.
* What the value means.
* Whether the field can be grouped by the aggregate API.
Host queries prefix service fields with `services.`. Use `same_service(...)`
when several conditions must match one endpoint.
Compose queries, combine clauses, validate fields, and paginate results.
Start from an IP, DNS name, service hypothesis, indicator list, or result set.
Browse request parameters, response schemas, and copyable examples.
See how tags, categories, and classifications fit together.