Skip to content

Search Audit Dataview Update #801

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Rj98-sh merged 1 commit into from
Jul 24, 2026
+18 −8
Merged

Search Audit Dataview Update #801

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
26 changes: 18 additions & 8 deletions docs/cwa/dataviews/search-audit.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ tags: ['database', 'report', 'setup']
draft: false
unlisted: false
last_update:
date: 2025-05-09
date: 2026-07-23
---

## Summary
Expand All @@ -18,16 +18,26 @@ This document provides an overview of the searches that are used in Automate at

## Columns

| Column | Description |
|---------------|-------------------------------------------------------------------------------------------------|
| SearchID | Search ID |
| Search Name | Search Name |
| Object Type | Type of the object against which a search is applied (e.g., Group, Remote Monitor) |
| Object Name | Name of the object against which the search is applied (e.g., Name of the Group, Name of the Remote Monitor) |
| Group Path | Full path to the group where the search is being used/applied. |
## Columns

| Column | Description |
|--------|-------------|
| Search ID | Unique ID of the search. |
| Search Name | Name of the search. |
| Total Machines in Search | Total number of machines currently included in the search. |
| Is Legacy Search | Indicates whether the search is likely a legacy search (`Yes`/`No`). |
| Object Type | Type of object that uses the search (e.g., Group, Remote Monitor). |
| Object Name | Name of the object that uses the search (e.g., Group name, Remote Monitor name). |
| Group Path | Full path of the group where the search is being used. |

**Note**: The **Is Legacy Search** column identifies searches that are likely to be legacy searches based on the available detection logic. Since there is no definitive method to identify legacy searches, the results may occasionally include false positives or false negatives.

## Changelog

### 2026-07-23

- Added columns `Total Machines in Search` and `Is Legacy Search` in the dataview

### 2025-04-10

- Initial version of the document
Loading