Search query to pull all the request actor/approver who are termed & who did not approved since more than 30/60 days

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

here is my query but not able to filter inactive actors?

type:access_request AND created:>=2024-05-01 AND created:<=2024-08-01 AND actor.name:* AND NOT (status:approved OR status:passed OR status:cancelled OR status:processed OR status:rejected) AND operation:request

but am not able to add attributes.cloudLifecycleState:inactive to the query. to pull correct number of request that are stuck/ no action has been taken and neither there is a process that reassigns those request to the new managers / approvers.
what could be the right query that goes along

2

Hello Osman,

Since this is an Event search, you won’t be able to get any other Actor information than their name (Searching Event Data). You could try combining this query with an identity search like name:{actor name} AND attributes.cloudLifecycleState:inactive.

This could be combined in a workflow to swiftly give you the expected results.

3

together these filters are not fetching any results.
have you tried running it ? what was the output ?