Rezonate
  • 🏠Home
  • 🚩Platform Tour
    • đŸ‡ģđŸ‡ŗPlatform Dashboard
    • 🆔Identity Analytics
      • đŸĒĒIdentity Centric
      • 🔡Identity By Platform
    • âš ī¸Risks & Threats
      • Highlighted ITDR Capabilities
  • â„šī¸How-to Guides
    • ➕Adding Integrations
    • đŸ¤ĻManage Users
    • 🧑‍đŸ’ŧCustomize Exposures
    • đŸ‘ī¸â€đŸ—¨ī¸Querying & Filtering Data
  • 📐Core Integrations
    • Azure Integration
      • Required Privilegees
      • Update Certificate for Existing Installation
    • Okta Integration
      • Okta Integration -Remediation Supported
    • Google Workspace
      • 1-Click Integration
      • Legacy Integration
    • Google Cloud Integration
    • Zoom Integration
    • DocuSign Integration
    • GitHub Integration
      • GitHub Enterprise Expansion
    • AWS Integration
      • AWS - Required Privileges
      • Log Streaming Integration
    • Salesforce Integration
      • Salesforce - Collected Data & Query Volume
    • JAMF Pro Integration
    • CircleCI Integration
    • Auth0 Integration
    • Cloudflare Integration
    • CrowdStrike Integration
      • Integrating Permissions
    • Slack Integration
    • Workday Integration
    • BambooHR Integration
    • Snowflake Integration
    • LastPass Integration
    • SentinelOne integration
    • SAP Cloud Platform Integration
    • GitLab Integration
    • Oracle NetSuite Integration
    • Atlassian Cloud Integration
    • Zendesk Integration
    • HiBob Integration
    • Microsoft Defender Integration
    • Docusign Integration
    • Mongo Atlas Integration
    • Ping Identity One Integration
    • Generic HRIS Integration
  • 📍Notifications & Alerts
    • Slack Integration
    • HTTP Webhook Integration
      • Webhook Alert Example - Saved Search
      • Webhook Alert Example- ITDR
    • Microsoft Teams Integration
    • Torq Integration
    • Email Integration
    • Splunk Integration
    • Datadog Integration
    • PagerDuty Integration
    • Jira Integration
  • 🆘Troubleshooting & Support
    • Collectors IP Ranges
    • Data Processing
      • AWS
      • Azure Active Directory
      • Azure Cloud
      • Google Workspace
    • SSO Integrations
      • SSO Login - Okta
      • SSO Login - AzureAd
  • 📓Legal & Terms
Powered by GitBook
On this page
  • Text Operators
  • Date Operators
  • Boolean Operators
  • Number Operators
  • Filters Combinations
  1. How-to Guides

Querying & Filtering Data

PreviousCustomize ExposuresNextCore Integrations

Last updated 11 months ago

Rezonate has advanced query builder capabilities that allow filtering and sorting for all of the data that is being collected from different integrated platforms. This capability is supported across the entire product through the filters & search boxes that are placed above any table.

For example, if we are looking for all of the enabled user accounts with global admin directory roles who were active in the last week, we can write something like this:

The Query builder has many operators that can be used, below is a detailed list of them and their purpose:

Text Operators

Operator
Purpose
Example

starts with

Search for any text that starts with a specific text. (Insensitive)

Find all users whose name starts with Or (Will result in Ori, Oran, etc..)

contains

Search for any text that contains a specific text (Insensitive)

Find all users whose name contains Or (Will result in Ori, Oran, Lior, etc..)

not contains

Search for any text that not contains a specific pattern

Find all users whose names do not contain ABC.

equals

Search for any equal text (case-sensitive) to a specific text

Find all users with a first name equal to Ori.

not equals

Search for any text that is not equal (case-sensitive) to a specific text

Find all users with first names not equal to Ori.

Date Operators

Operator
Purpose
Example

last

Search for dates that occurred within the selected relative date.

Find all users whose last login was within the last week.

before-last

Search for dates that occurred before the selected relative date.

Find all users whose last login was before the last week.

before

Search for dates that occurred before the selected date

Find all users whose last login was before 1/1/2024

after

Search for dates that occurred after the selected date

Find all users whose last login was after 1/1/2024

Pro Tip! - When saving searches in the query catalog, its always preferred to use relative date operators such as last or before-last.

Boolean Operators

Operator
Purpose
Example

is

Find a matching value for the boolean

Find all users with enabled account. (Enabled is true)

Number Operators

Operator
Purpose
Example

Bigger Than

Find records with a number bigger than the searched input

Find all users with age>10

Smaller Than

Find records with a number smaller than the searched input

Find all users with age<10

Equals

Find records with a number equal to a selected input

Find all users with age=10

Not Equals

Find records with a number not equal to a selected input

Find all users with age!=10

Filters Combinations

When combining multiple filters on the same field, the resulting query term would apply AND criteria between them. this means that when searching for Name contains "Ori" and Name contains "Levy" the compiled search would be

Name contains "Ori" AND Name contains "Levy"

Special Cases

Although the regular behavior, when combining multiple Equals filters on the same field, Rezonate will compile them with OR Operator. this means that when searching for Name equals "Ori", and Name equals "Ron" the compiled search would be

Name equals "Ori" OR Name equals "Ron"

â„šī¸
đŸ‘ī¸â€đŸ—¨ī¸
Query Builder example, Azure users page
Query Builder Example #1
Example for Query term
Example for Query term