Skip to main content

Search

Properties

NameTypeDescriptionNotes
indices[]IndexThe names of the Elasticsearch indices in which to search. If none are provided, then all indices will be searched.[optional]
query_typeQueryType[optional] [default to QueryType.SAILPOINT]
query_versionstr[optional]
queryQuery[optional]
query_dslobjectThe search query using the Elasticsearch Query DSL syntax.[optional]
text_queryTextQuery[optional]
type_ahead_queryTypeAheadQuery[optional]
include_nestedboolIndicates whether nested objects from returned search results should be included.[optional] [default to True]
query_result_filterQueryResultFilter[optional]
aggregation_typeAggregationType[optional] [default to AggregationType.DSL]
aggregations_versionstr[optional]
aggregations_dslobjectThe aggregation search query using Elasticsearch Aggregations syntax.[optional]
aggregationsSearchAggregationSpecification[optional]
sort[]strThe fields to be used to sort the search results. Use + or - to specify the sort direction.[optional]
search_after[]strUsed to begin the search window at the values specified. This parameter consists of the last values of the sorted fields in the current record set. This is used to expand the Elasticsearch limit of 10K records by shifting the 10K window to begin at this value. It is recommended that you always include the ID of the object in addition to any other fields on this parameter in order to ensure you don't get duplicate results while paging. For example, when searching for identities, if you are sorting by displayName you will also want to include ID, for example ["displayName", "id"]. If the last identity ID in the search result is 2c91808375d8e80a0175e1f88a575221 and the last displayName is "John Doe", then using that displayName and ID will start a new search after this identity. The searchAfter value will look like ["John Doe","2c91808375d8e80a0175e1f88a575221"][optional]
filtersmap[string]FilterThe filters to be applied for each filtered field name.[optional]
}

Example

from sailpoint.v3.models.search import Search

search = Search(
indices=[identities],
query_type='SAILPOINT',
query_version=,
query=sailpoint.v3.models.query.Query(
query = 'name:a*',
fields = '[firstName,lastName,email]',
time_zone = 'America/Chicago',
inner_hit = sailpoint.v3.models.inner_hit.InnerHit(
query = 'source.name:\"Active Directory\"',
type = 'access', ), ),
query_dsl={match={name=john.doe}},
text_query=sailpoint.v3.models.text_query.TextQuery(
terms = [The quick brown fox, 3141592, 7],
fields = [displayName, employeeNumber, roleCount],
match_any = False,
contains = True, ),
type_ahead_query=sailpoint.v3.models.type_ahead_query.TypeAheadQuery(
query = 'Work',
field = 'source.name',
nested_type = 'access',
max_expansions = 10,
size = 100,
sort = 'desc',
sort_by_value = True, ),
include_nested=True,
query_result_filter=sailpoint.v3.models.query_result_filter.QueryResultFilter(
includes = [name, displayName],
excludes = [stacktrace], ),
aggregation_type='DSL',
aggregations_version=,
aggregations_dsl={},
aggregations=,
sort=[displayName, +id],
search_after=[John Doe, 2c91808375d8e80a0175e1f88a575221],
filters={}
)

[Back to top]