Skip to main content
Ctrl+K
Logo image Logo image

EclecticIQ Intelligence Center 3.4.0

Site Navigation

  • Release notes
  • Install Configure Upgrade
  • Get to know EclecticIQ Intelligence Center
  • Work with intelligence
  • Integrations

Section Navigation

  • Command palette
  • View the help
  • AI features
    • AI-powered search
    • Writing assistant
    • AI-generated reports
  • About ingestion
  • Tags
  • Browse
    • Customize list columns
    • Edit entities in Browse
    • Filter entities in Browse
  • Discovery
    • Add entities from the discovery service
    • Customize list columns
    • Edit entities through the Discovery page
    • Export from discovery
  • Exposure
    • About exposure
    • Configure exposure
    • View exposure
    • Edit entities in Exposure
    • Review Exposure
    • Override exposure
    • Customize list columns
  • Production
    • Customize list columns
    • Edit entities in Production
    • Filter entities in Production
  • Rules
    • Entity rules
      • About entity rules
      • Create entity rules
      • Entity rule actions
      • Content criteria tool
      • Manage entity rules
    • Observable rules
      • Create observable rules
      • Manage observable rules
    • Enrichment rules
      • Create enrichment rules
      • Manage enrichment rules
    • Discovery rules
      • Create
      • Manage
    • Create
    • Manage
  • MITRE ATT&CK
    • Classifications
      • (Un)assign TTPs to entities
      • Filter with and view TTPs
    • Analysis
      • Create heat maps
      • Customize heat maps
  • Knowledge packs
  • Data mapping templates
  • Search
    • Query Syntax
    • Relational
    • Kibana
    • Tokenization
  • Filters
    • About filters
    • About source reliability
    • Filter entities by source
    • Filter entities by TLP
    • Filter entities with the histogram
    • Filter entities with timebar
    • Use the context filters
    • Use the quick filters
  • Workspaces
    • About workspaces
    • Access workspaces
    • Default public workspace
    • Create workspaces
    • List and unlist workspaces
    • Add edit and remove entities
    • Add edit and remove datasets
    • Add and remove graphs
    • Collaborate with other users
      • Add collaborators to a workspace
      • Remove collaborators from a workspace
      • Create user tasks
      • View tasks
      • Edit tasks
      • Write and review comments
    • Edit workspaces
    • Archive workspaces
    • Restore workspaces
    • Delete workspaces
    • View workspace history
  • Datasets
    • About datasets
    • Create a dataset
    • Add entities to a dataset
    • Edit entities in a dataset
    • Export from a dataset
    • Edit a dataset
    • Delete a dataset
    • Dataset metrics
  • Graphs
    • About graphs
    • Create a graph
    • Access a graph
    • Add entities to a graph
    • Analyze entities in a graph
    • Group entities in a graph
    • Edit entities in a graph
    • Publish entities in a graph
    • Remove entities from a graph
    • Add relationships to a graph
    • Edit relationships in a graph
    • Publish relationships in a graph
    • Remove relationships from a graph
    • Add observables to a graph
    • Publish observables in a graph
    • Edit observables in a graph
    • Remove observables from a graph
    • Delete observables from a graph
    • Review enrichment observables
    • Move around on the graph
    • Graph on Neighborhood tab
    • Add graph to workspaces
    • Filter entities with the timebar
    • Filter entities with the histogram
    • Toggle visualization layouts
    • Save and export the graph
    • View full titles in the graph
  • Permissions
    • Default Intelligence Center roles
    • Intelligence Center permissions
    • Permissions to access settings
    • Permissions to access data
    • Permissions for public API endpoints
    • Token-based authentication
      • Create an API token
      • Delete an API token
    • Two-factor authentication (2FA)
      • About two-factor authentication
      • Enforce two-factor authentication
      • Set up two-factor authentication
      • Use Do not ask for N days
      • Generate new recovery codes
      • Recover two-factor authentication
      • Disable two-factor authentication
      • Review two-factor authentication activity
  • Users
    • User permissions
    • Manage your own user account
    • Manage users
    • Manage groups
    • Manage roles
    • Manage notifications
    • Manage automation users
    • Export and import user database
  • Policies
    • Account policies
    • Data policies
      • Create data policies
      • Manage data policies

AI | Search#

When you have configured an AI-provider, AI-powered search can turn your natural language question into a machine-readable query. This means you won’t have to craft the search query syntax yourself.

Currently, you can only use AI for Search icon Search and browse Entity search.

AI will select regular or relational

The AI will create a relational search query if that best matches the question you posed.

Use AI search#

To use AI-powered search:

  1. Navigate to the search field you need to use, for example Search icon Search and browse.

  2. On the right side of the search bar, select AI-powered search.

  3. Enter your question, describing what you would like to find to the AI.

  4. Press Enter.

The AI now generates an applicable query and runs it, showing the query it generates in the search field.

You can then have it Sync Regenerate query code or you can Edit code to fine tune the query that the AI generated.

previous

AI | About

next

AI | Writing assistant

On this page
  • Use AI search