Data Extract Feature

IdentityIQ (IIQ) IIQ Discussion and Questions
1

Hi,

Is it possible to use two classes in one YAML to extract the data. If yes, could you please help me with the details.

Regards,

Prashansa

2

Hi @Prash ,

Yes, it is absolutely possible to extract multiple object classes in a single YAML configuration Below is the sample Extarct and Transform to extract the multiple object.

Extract:

<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE YAMLConfig PUBLIC "sailpoint.dtd" "sailpoint.dtd">
<YAMLConfig name="MultiObjectExtractConfig" type="Extract">
  <YamlText>
# Extract Configuration
extractedObjects:
  ProvisioningTransaction:
    filterString: id == "0ab1c5f3998e107b81999aef2e342aa1"
    deleteTransformFormat: "none"
  AuditEvent:
    filterString: action == "DebugObjectBrowserChange"
    deleteTransformFormat: "none"
  Identity:
    filterString: name.startsWith("A")
    deleteTransformFormat: "none"
transformConfigurationName: "MultiObjectTransformConfig"
messageDestination: "LogPublisher"
  </YamlText>
</YAMLConfig>

Transform:

<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE YAMLConfig PUBLIC "sailpoint.dtd" "sailpoint.dtd">
<YAMLConfig name="MultiObjectTransformConfig" type="Transform">
  <YamlText>
imageConfigDescriptors:
  ProvisioningTransaction:
    objectClassName: sailpoint.object.ProvisioningTransaction
    imagePropertyConfigDescriptors:
      - property: id
      - property: applicationName
      - property: operation
  AuditEvent:
    objectClassName: sailpoint.object.AuditEvent
    imagePropertyConfigDescriptors:
      - property: id
      - property: action
      - property: source
  Identity:
    objectClassName: sailpoint.object.Identity
    imagePropertyConfigDescriptors:
      - property: name
      - property: email
      - property: displayName
  </YamlText>
</YAMLConfig>
1 Like
3

HI @Arun-Kumar

Thanks for providing the sample YAML files.

Could you please help me understand how the above extract YAML configuration works

It provide the data after meeting all the three object class filterString, like ProvisioningTransaction with id “0ab1c5f3998e107b81999aef2e342aa1“ and AuditEvent action is “DebugObjectBrowserChange“ and if that identity’s name start with A then only data will fetched and publish to log?

OR

Three different data will be publish to log?

4

Hi @Prash ,

Each Object type in Extract objects is processed independently, and the filtering logic applies only within that object type.

5

Hi @Arun-Kumar ,

Thanks for clarifying it.

Is it possible to use these object classes in “AND’“ condition.

For example retrieving only those identity details from identity object class which is returned from provisioning transaction filterString application == “Active Directory” && action==”create”

6

Hi @Prash ,

If you need to retrieve the identity details, you can extract them from the ProvisioningTransaction object using below Extarct.

<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE YAMLConfig PUBLIC "sailpoint.dtd" "sailpoint.dtd">
<YAMLConfig name="ProvisioningTransactionExtractConfig" type="Extract">
  <YamlText># Extract Configuration
extractedObjects:
  ProvisioningTransaction:
    filterString: applicationName == "Active Directory" &amp;&amp; operation == "Create"
    deleteTransformFormat: "none"
transformConfigurationName: "ProvisioningTransactionTransformConfig"
messageDestination: "LogPublisher"
</YamlText>
</YAMLConfig>
7

HI @Arun-Kumar

Thanks again!!

Do you know if we can fetch the detail of only those identity on which joiner or leaver triggered in the last one month using the data extract YAML.

For example

The extracted data should have below details

FirstName, LastName, Department, email, event, timestamp of event

8

Hi @Arun-Kumar

Do you know how can we export the data in a csv file from data extract task instead of pushing the data to log file in jason format.

9

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.