AI | Use in Search

When you have configured an AI-provider, AI-powered search can turn your natural language question into a machine-readable query. This means you won’t have to craft the search query syntax yourself. It is good to understand how search works in EclecticIQ Intelligence Center, so that you can verify the search query that the AI suggests.

Currently, you can only use AI for Entity search.

AI will select regular or relational

The AI will create a relational search query if you include the either the words “related to” or “relationship” in your question.

You can use AI for the following kinds of searches:

• Search:

  • Entity search (regular and relational).

  • Observable search.

• Search query dataset creation.

Searching with AI

To use AI-powered search:

1. From the left sidebar, select Search.

2. On the right side of the search bar, select .

3. Enter your question, describing what you would like the AI to find.
   For example, if you’d like to find “threat actor using the ABC malware”
   ask AI a question like find threat actors related to Akira malware
   to have the AI generate and run a query like data.type:"threat-actor" RELATED TO data.type:"malware" AND Akira

4. Press Enter.

The AI now generates a Lucene query matching your question and runs it, showing the query it generates in the search field.

You can then have it Regenerate query code or you can Edit code to fine tune the query that the AI generated.