Use Advanced Search

Learn how to use advanced search on SaaS Security API to isolate specific assets.
In some cases, a faceted search will not provide you enough detail to find high priority incidents. To isolate important problems, use advanced search to:
  • Match more than one rule.
  • Ignore the assets that match rules but that are not important to you.
Advanced search provides the same filters as a basic faceted search, but gives you more options to apply connectors and operators. For example, if you have a company policy that considers social security numbers, tax information numbers, and credit card numbers to be sensitive data, you may need to search for all assets that contain any of these numbers and notify the owners.
Before you perform an advanced search, learn how to compose an expression.
  1. Show the assets.
    1. Select
      Explore
      Assets
      .
    2. Select
      Advanced
      to start an advanced search.
  2. Type your expression in the search box.
    Your search expression is composed of a set of supported fields, operators, and values. Type an opening parenthesis to display syntax help. As you type, the autofill function displays existing values (policies, data patterns, etc), helping you build your query accurately and efficiently. For example, you can:
    • Search by existing policy (
      policy.name
      )—Use this option to locate incidents that you want to remediate.
    • Search by existing data patterns (
      data_pattern.name
      )—Use this option to retrieve a results set with the intention of building a policy. Click
      Create Policy
      to add the expression as match criteria in a new policy.
  3. (
    Optional
    ) Export this data to a CSV file to view and sort the search results.
  4. (
    Optional
    ) Take actions on the cloud assets that match your filtering criteria.
    See Supported Content, Remediation and Monitoring for a list of remediation actions available.

Recommended For You