1. Support
  2. Knowledge base
  3. 100050030

Search Syntax in Veritas Alta SaaS Protection

Article: 100050030
Last Published: 2023-04-26
Ratings: 0 0
Product(s): Veritas Alta SaaS Protection

Description

Veritas Alta SaaS Protection search is based on ElasticSearch. This article provides some brief examples of syntax for common types of search queries.
 
For an advanced guide to search query syntax see:  ElasticSearch query Syntax

Wildcards

Wildcard searches can be run on individual search terms.

To replace a single character, use:

?
And to replace zero or more characters, use:
*
EXAMPLE: We want to find items that contain mention of a person named David Alinsky. We know that his first name might be spelled as 'Dave' and that his last name is sometimes mispelled as 'Alansky':
dav* al?nsky

Phrase Match

Exact phrase match finds instances where all of the search terms are in the exact order you have specified in your query.

To make a query string an exact phrase match, use quotations before and after the set of terms to be exactly matched:
" "
EXAMPLE: We want to find all items containing a code phrase used for insider trading:
"there is no more coffee today"

Boolean

Boolean operators give you more control over the way search terms are evaluated in your query string.

By default, all terms are optional (OR, meaning any item containing ANY one of the terms would be a result). For instance, consider the following search:
data storage aware
// this is equivalent to: data OR storage OR aware
To make a term required in the result, use:
+
And to make it a requirement that a term is not present in the item, use:
-
EXAMPLES: We want to find items containing either 'data' or 'storage' that must contain 'aware'.
data storage +aware
We want to find items containing either 'data' or 'storage' that must contain 'aware' but do not have 'whitepaper'.
data storage +aware -whitepaper

Classical Operators

It is also possible to use the classical approach to expressing Boolean operators, such as:
AND
NOT
AND NOT
EXAMPLE: We want to find items containing either 'data' or 'storage' that must contain 'aware' but do not have 'whitepaper'.
((data OR storage) AND aware) AND NOT whitepaper
NOTE: Keep in mind that classical operators typically affect the terms to the left and right of the operator; whereas + and - operators only affect the term to the immediate right of the operator. Also, the + and - operators are treated equally; whereas, there is precedence in the classical operators. NOT takes precedence over AND, and AND over OR.

Fuzziness

Fuzziness helps you to search for similar terms, within a maximum of two differences. A difference is defined as the insertion, deletion, or substitution of a single character, or transposition of two adjacent characters.

To use fuzzy search, use:
~
EXAMPLE: We want to search for items containing any of the terms 'quick', 'brown', or 'fox', and wish to account for any potential mispellings:
quick~ brwn~ foks~

Proximity

Proximity search looks for the specified words in a phrase, even when they are further apart or in a different order.

With proximity, you specify the number of words distance you wish to be considered.
"example phrase"~5
// the number 5 is provided as an example for the words distance parameter
 
EXAMPLE: We are interested in any phrase that contains mention of a "fox" being "quick". The following proximity search would return results containing phrases such as "quick fox" and "quick smart brown fox":
"fox quick"~5
 

Boosting

Boosting makes one term more relevant than another.

To boost a term, use:

^
EXAMPLE: We want to find all items about cloud, but we are especially interested in storage:
cloud storage^2
Boosts can also be used with phrases:
"cloud storage"^2
 
For an advanced guide to search query syntax see:  Elasticsearch query syntax

Was this content helpful?

Article Languages