From 3e02d908df70d30463a711b532b8ed972690f7a4 Mon Sep 17 00:00:00 2001 From: Kamalgurna Date: Thu, 23 Jul 2026 16:37:08 -0400 Subject: [PATCH] Search Audit Dataview Update - Added columns `Total Machines in Search` and `Is Legacy Search` in the dataview --- docs/cwa/dataviews/search-audit.md | 26 ++++++++++++++++++-------- 1 file changed, 18 insertions(+), 8 deletions(-) diff --git a/docs/cwa/dataviews/search-audit.md b/docs/cwa/dataviews/search-audit.md index 5829063ee1..d130557d2a 100644 --- a/docs/cwa/dataviews/search-audit.md +++ b/docs/cwa/dataviews/search-audit.md @@ -9,7 +9,7 @@ tags: ['database', 'report', 'setup'] draft: false unlisted: false last_update: - date: 2025-05-09 + date: 2026-07-23 --- ## Summary @@ -18,16 +18,26 @@ This document provides an overview of the searches that are used in Automate at ## Columns -| Column | Description | -|---------------|-------------------------------------------------------------------------------------------------| -| SearchID | Search ID | -| Search Name | Search Name | -| Object Type | Type of the object against which a search is applied (e.g., Group, Remote Monitor) | -| Object Name | Name of the object against which the search is applied (e.g., Name of the Group, Name of the Remote Monitor) | -| Group Path | Full path to the group where the search is being used/applied. | +## Columns + +| Column | Description | +|--------|-------------| +| Search ID | Unique ID of the search. | +| Search Name | Name of the search. | +| Total Machines in Search | Total number of machines currently included in the search. | +| Is Legacy Search | Indicates whether the search is likely a legacy search (`Yes`/`No`). | +| Object Type | Type of object that uses the search (e.g., Group, Remote Monitor). | +| Object Name | Name of the object that uses the search (e.g., Group name, Remote Monitor name). | +| Group Path | Full path of the group where the search is being used. | + +**Note**: The **Is Legacy Search** column identifies searches that are likely to be legacy searches based on the available detection logic. Since there is no definitive method to identify legacy searches, the results may occasionally include false positives or false negatives. ## Changelog +### 2026-07-23 + +- Added columns `Total Machines in Search` and `Is Legacy Search` in the dataview + ### 2025-04-10 - Initial version of the document