Skip to content

Reports with the Query Builder

With the Query Builder, you can produce a variety of reports based on Privacera-supplied fields or on custom filters you create.

The two general types of queries are complementary:

  • Via Privacera-supplied pulldown menus to specify values of fields that must be included in the search results.
  • Via Query Filters you yourself construct, which allow you specify fields that must or must not be included in the search results.

With Query Filters, you can narrow the search by excluding data from reports that you don’t want to see.

Accessing the Query Builder#

To access the Query Builder:

  1. On the left nav, go to Reports > Built-in Reports.
  2. In the main topic page, click View or Edit Report to open either Data Discovery Overview or Discovery Alerts.

The Query Builder page is displayed.

The pre-supplied fields for searches are shown at the top. Search results are displayed at the bottom.

From left to right across the top:

  • Partial or full match of the data
  • Pulldown menus to search by Application, Tag, Datazone, or to exclude a certain resource.
  • Search by location.
  • Search only the last seven days.
  • Scan type: either Offline or Realtime.
  • Group Folders in the output.
  • Group Tables in the output.

Available filter fields#

The following filters are the basis for both the Privacera-supplied search and custom Query Filters.

Filter Description
Application The application running on the asset, such as a web server or database.
Tags User-defined information fields you have applied to assets.
Tag Attributes Additional criteria on those tags to further refine the information.
Datazone Your logical grouping of the assets by type or security level of the data
Datazone Owner The registered user or group that manages that datazone

About scan type

The Scan Type pulldown menu has the following selections:

  • Offline: The report is based on the most recently stored data collected from the assets by Privacera.
  • Realtime: The report is based on data collected from the assets at the time the report is run. Depending on the number of assets you have, network latency, and other considerations, generating a realtime report might require that you be patient for the results.

General approach to using the Query Builder#

This is a general approach to using the Query Builder.

As you become more familiar with the tool, you will refine this general approach for your needs.

  1. Be sure you have a good understanding of the types of information you have associated with your cloud-based assets: the applications, tags, datazones, and other categories. See Available filter fields.
  2. Decide on the fields that will display the information you want to see. For instance, are you interested in the applications or the datazones or both?
  3. From the pulldown menus across the top of the Query Builder page, select the fields you want to see.
  4. As you make selections, total counts of the assets in various categories based on your selection criteria and the complete results of the search are dynamically displayed.
  5. Look at the output to determine if you have the data you want to see. You can adjust the menu selections to further refine the results. You can also use Query Filters to tailor the output to your needs.

This simple example shows the assets that are running Hadoop-HIVE as selected from the Application pulldown menu. All other selectable fields have not been set.

Save or export a report#

To reuse a search at a later time, at the top of the page, click Save and enter a name for the search.

To download a copy of the resulting data in Comma-Separated Value (CSV) format, at the top of the page, click Export to CSV and follow the leading prompts.

Creating custom reports with Query Filters#

With the Query Builder’s Query Filters, you can find and view precise information about your cloud-based assets.

Conditions, filters, “Are”, and “Are Not”#

You can define certain conditions to filter the data to select the assets you are interested in. These filters are listed in Available filter fields. You set these conditions as either Are applicable (the filter must match) or Are Not applicable (the filter must not match) to the assets you are interested in.

You can combine multiple conditions to further refine your search

Enabling Query Filters#

To enable Query Filters:

  1. On the left nav, go to Reports > Built-in Reports.
  2. In the main topic page, click View or Edit Report to open either Data Discovery Overview or Discovery Alerts. The Query Filters slider is displayed on the right.
  3. Slide the control to the right to enable Query Filters.

General approach to using Query Filters#

This is a general approach to using Query Filters. As you become more familiar with the tool, you will refine this general approach for your precise needs.

  1. Be sure you have a good understanding of the types of information you have associated with your cloud-based assets: the applications, tags, datazones, and other categories. See Available filter fields.
  2. Decide the condition or conditions that will display the information you want to see. For instance, are you interested in the applications or the datazones or both?
  3. In the Query Filters box, create a new condition by clicking Add Condition.
  4. From the pulldown menus for the condition:
  5. On the left, select the desired filter.
  6. In the middle, specify whether that filter is applicable (Are) or not applicable (Are Not) to the search.
  7. On the right, enter a string that matches what you are interested in.
  8. A list of matching data is displayed from which you can select the exact field.
  9. The Query Preview on the right shows a text representation of the query.
  10. Keep adding more conditions, if desired. To add another condition, specify AND to indicate that the condition is required or OR to indicate that the condition is optional.
  11. After you have added all desired conditions, click Search.

Total counts of the assets in various categories based on your filter criteria and the complete results of the search are displayed.

Example query filter: single condition#

This example of a single condition searches for assets that ARE NOT tagged as ACCOUNT or EMAIL.

Example query filter: multiple conditions#

This query has multiple conditions:

  • The condition described in Example query: single condition.
  • A required condition (Are) that the Application must be AWS-Redshift.
  • A final condition that the Datazone must not (Are Not) be EXPUNGE.


Last update: July 23, 2021