Start searching#

Permissions for search#

Search results for entities, observables, datasets, and the graph are filtered and made available based on the current user’s set of rights and permissions.

This means that users who have different access rights, and who run identical search queries on the same Intelligence Center instance, can receive different search results.

If a user runs a search query that returns matches, and if the returned results include objects that the current user is not granted access to, they receive a notification message:

Excluded matches

Some matches may be excluded due to access restrictions.

Search results include matches that the current user can access, based on:

The selected Allowed sources in the group configuration of the group(s) the user belongs to.
The TLP access level for the specified allowed sources in the group configuration of the group(s) the user belongs to.
The permissions granted to the role assigned to the user.

Search in EclecticIQ Intelligence Center using the following:

Ways of searching#

Note

Search history allows you see your previously searched keywords.

Quick search#

From the left navigation, select Search .
Enter your query and press ENTER.

Search and browse#

From the left navigation, select Search > Go to Search and Browse.
In the search field, enter your query and press ENTER.

Any search queries you run through this search input field are executed Intelligence Center-wide. You can search with literal search terms, wildcards, and Boolean operators.

Relational search#

From the navigation bar on the left, select > Go to Search and Browse.
In the top-left corner, select the dropdown menu > Relational query.