Community
Questions Library
Docs
Blog
Events
Swag
Github
Slack
JupiterOne
Discussions
Release Notes
Contact Us
J1 Query Builder - AskJ1 Community
<main> <article class="userContent"> <p>J1 Query Builder is a tool that provides a visual way to build a query in <a rel="nofollow" href="https://jupiterone.vanillacommunities.com/kb/articles/980-introduction-to-jupiterone-query-language-j1ql">J1QL</a> without having to know the language.</p> <p><img src="https://us.v-cdn.net/6035534/uploads/Y2SEX6DFHW1B/query-builder-home.png" alt="" class="embedImage-img importedEmbed-img"></img></p> <p>To create a query in Query Builder:</p> <ol><li><p>At the top of the J1 homepage, click the <strong>Query Builder</strong> tab.</p></li> <li><p>Click <strong>query anything</strong> if you want to query all of your assets or click <strong>specific entities</strong> to select the exact assets you want to find. You can use the search bar to search assets by their class or type.</p></li> <li><p>Click <strong>Add Filter</strong> to filter by a specific property, tag, or metadata. Add an operator and specific value you want to query on, if applicable. You can also filter your assets by filter group [don't understand this]. You can as many filters as you want.</p></li> <li><p>Click <strong>RELATES TO</strong> to select from the dropdown menu the <a rel="nofollow" href="https://jupiterone.vanillacommunities.com/kb/articles/980-introduction-to-jupiterone-query-language-j1ql##basic-keywords">specific relationship verbs</a> you want to use in your query. You can add as many relationships as you want.</p></li> <li><p>Click Table or Graph to choose how you want to return the results. You can toggle between the options by clicking <strong>Run Query</strong> after you make your selection.</p></li> <li><p>Click <strong>Run Query</strong> in the box on the right of the page.</p></li> </ol><p><img src="https://us.v-cdn.net/6035534/uploads/8XT5JIZ1PRV9/query-builder.gif" alt="" class="embedImage-img importedEmbed-img"></img></p> <p>Using the icons in the box at the top right of the page, you can:</p> <ul><li>Reset the query to start again</li> <li>Save the query as a question in the questions library</li> <li>Add the query results to <a rel="nofollow" href="https://jupiterone.vanillacommunities.com/kb/articles/812-getting-started-with-insights-dashboards">J1 Insights</a></li> <li>Create an <a rel="nofollow" href="https://jupiterone.vanillacommunities.com/kb/articles/940-alerts-and-alert-rules">alert</a></li> <li>Generate a link to the query that you can share</li> <li>Copy the query to the clipboard</li> <li>Download the query</li> </ul> </article> </main>
.png)