Need search query to filter all the accounts for a specific source which doesnot start with E

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hello Team ,

I need one search query to filter all the accounts for a specific source which does not start with E. Need to save this report

Trying this: @accounts(source.name:ABC AND NOT accountName:E*) but this is not working. Please suggest

2

Hi,

In search accountName is not available, instead accountName use name, find the below screenshot other attribute we have to search inside @accounts()

image
image485Ă—438 7.72 KB

try below query:
@accounts(source.name:"Source Name" AND NOT name:E*)

3

Give a try with this query it works fine for me
@accounts(NOT name:E* AND source.name:ABC)

4

try below search query
@accounts(source.name:“abc” and NOT name:e*)

5

This is not returning for me cz this result will return only accounts which are correlated with identities , now the machine identities are uncorrelated. basically my human user’s accoutname is getting started with EXXX , whats ever is not starting with E i need to pull up in this report

6

Search only returns results for identities. It does not search data in uncorrelated accounts, because the data model is based on identity records. You can search accounts that are correlated to identities only.

7

The easiest thing to do may be to export an account list from your source and filter on the account column.

8

Hi @Dsinha1,

You will not get the uncorrelated account details from search. It would be advisable to make use of a GET call on the accounts API with a header as below

{{baseUrl}}/accounts?filters=sourceId eq "yourSourceId" and not name sw "EX"