Constructing advanced search queries

Advanced search allows you to create complex queries using free form query text and link multiple search syntax using operators such as AND and OR This feature is ideal for performing precise searches that involve multiple conditions, often targeting specific fields or parameters. Additionally, advanced search will narrow down the results by using multiple criteria at a time. 

Example: A search query constructed in advanced search box looks like this:

FIND (category EQUALS "Applications & Services" AND entity_class IN "Application"). This query retrieves entities with the category "Applications & Services" and the class "Application."

Each condition includes the following elements:

• A parameter or field you are searching by. This can be Category, Critical, EntityClass, EntityID, LocationName, SourceName, State, TagKey, IngestedSource and Group users. 
• A corresponding value you are looking for, such as "application."
• An connector, such as EQUALS and IN to define the relationship. You can also use other connectors, such as STARTS WITH, ENDS WITH, CONTAINS

Advanced search options include:

• EQUALS: Returns entities where the field value exactly matches the specified value.
• IN: Returns entities where the field value matches any value within the specified list.
• STARTS WITH: Returns entities where the field value begins with the specified characters.
• ENDS WITH: Returns entities where the field value ends with the specified characters.
• CONTAINS WORD(S) : Returns entities that include the specified word(s) anywhere in the field value.
• RANGE: Returns entities whose values fall within the specified date range.
• CONTAINS: Returns entities that contain the specified word within the field value.

Performing advanced searches

Use this procedure to construct and run advanced search queries. 

To run advanced searches:

1. Navigate to Resolutions --> Overview, under Entities. The Entities Overview page appears.

2. Click on a specific class in a category from the entities list. This displays the list of entities that belong to this class under this category in the Entity Inventory page.

3. Click the Advanced filter icon to open the query section. 

By default, the query is displayed based on the selected category and class on the Entities Overview page in the query box in the Entity Inventory page. 

4. Either you can write the query from scratch by clearing the existing query (or) change the existing query in the query box. 

Ex: FIND (category EQUALS "Applications & Services" AND entity_class IN "Application").

You can perform the following on the query box:

• Click Clear to remove the existing query or any query you do not want to use.
• Click Format Query to format the query in the query box. If the query is long, each line will be displayed on a new line.
• Click the icon to learn how to write advanced search queries and use logical operators. 
• Click Close to close the query box.