Community
Questions Library
Docs
Blog
Events
Swag
Github
Slack
JupiterOne
Discussions
Release Notes
Contact Us
Navigating the JupiterOne Graphs - AskJ1 Community
<main> <article class="userContent"> <p>J1 is built on a data-driven graph platform. For the story that inspired J1 to build it, read <a rel="nofollow" href="https://jupiterone.com/blog/three-dimensional-security/">the J1 blog</a>.</p> <p>JupiterOne Query Language (J1QL) is designed to traverse this graph and return a subgraph, or data from the nodes (assets) and edges (relationships) of a subgraph. You can view and interact with the subgraph from any J1QL query result.</p> <p>This documentation focuses on interacting with the graph component. For more details on J1QL, read the <a rel="nofollow" href="https://jupiterone.vanillacommunities.com/kb/articles/844-jupiterone-query-language-tutorial">J1QL tutorial</a> and <a rel="nofollow" href="https://jupiterone.vanillacommunities.com/kb/articles/980-introduction-to-jupiterone-query-language-j1ql">technical doc</a>.</p> <p>This is an example result graph from a query in J1 Search:</p> <p><img src="https://us.v-cdn.net/6035534/uploads/WP7PJCHBPTEB/j1ql-tutorial-root-accounts-graph.png" alt="" class="embedImage-img importedEmbed-img"></img></p> <p>The first set of controls in the upper-right corner comprises:</p> <table><thead><tr><th align="center">Control</th> <th align="left">Function</th> </tr></thead><tbody><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/QU2SOK12QAJG/query-eye.png" alt="query-eye" class="embedImage-img importedEmbed-img"></img></td> <td align="left">Switch views between <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">Table</code>, <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">Graph</code>, <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">Raw JSON</code>, and <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">Pretty JSON</code>.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/SU345CXCJBJH/query-share.png" alt="query-share" class="embedImage-img importedEmbed-img"></img></td> <td align="left">Export and share the query by sharing a link or downloading as a CSV or JSON file.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/2XCY7BW2757F/query-copy.png" alt="query-copy" class="embedImage-img importedEmbed-img"></img></td> <td align="left">Copy the query to the clipboard to reuse.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/0A34NETXKCQQ/graph-insights.png" alt="" class="embedImage-img importedEmbed-img"></img></td> <td align="left">Save the query shows a modal popup where you can provide a title, description, and, optionally, some tags to save it to your own query library.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/IV27PLPL2P6M/query-create-alert.png" alt="" class="embedImage-img importedEmbed-img"></img></td> <td align="left">Create an alert for this query.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/WFHK3M48WSN5/query-close.png" alt="query-close" class="embedImage-img importedEmbed-img"></img></td> <td align="left">Close and remove the results for this specific query/question from the page view.</td> </tr></tbody></table><p>Selecting any node on the graph displays a set of controls directly on top of it that allows you to interact with the node. The controls provide the following functions:</p> <table><thead><tr><th align="center">Control</th> <th>Function</th> </tr></thead><tbody><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/2FTILFJO0LP8/query-properties.png" alt="query-properties" class="embedImage-img importedEmbed-img"></img></td> <td>Open the side panel to show the detailed properties, tags, and metadata of the selected asset. You can select an edge and see the relationship properties in the side panel as well.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/DV1KTUC9P05C/query-show-more.png" alt="query-show-more" class="embedImage-img importedEmbed-img"></img></td> <td>Display additional asset nodes that are directly connected to the selected asset but are not yet loaded into the graph.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/TMADWUDV9Z2A/query-hide.png" alt="query-hide" class="embedImage-img importedEmbed-img"></img></td> <td>Hide the asset from the graph to reduce clutter. You can unhide all hidden assets from the bottom-left control.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/8PRP009AHPVM/query-explan.png" alt="query-explan" class="embedImage-img importedEmbed-img"></img></td> <td>Expand grouped nodes of the same type that have the same parent nodes. This option may not be always available depending on the data in the graph.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/WF3NXIAO33ID/query-collapse.png" alt="query-collapse" class="embedImage-img importedEmbed-img"></img></td> <td>Collapse nodes of the same type that have the same parent nodes into a group. This option may not be always available depending on the data in the graph.</td> </tr></tbody></table><p>The last set of controls are at the bottom-left of the graph, and they provide the following functions:</p> <table><thead><tr><th align="center">Control</th> <th>Function</th> </tr></thead><tbody><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/QY4V8Z55QWG1/query-filter.png" alt="query-filter" class="embedImage-img importedEmbed-img"></img></td> <td>Open the filter panel to show or hide assets on the graph by account and/or type.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/2Z2JY4X5IJMV/query-lock.png" alt="query-lock" class="embedImage-img importedEmbed-img"></img></td> <td>Lock the movement of connected assets.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/HCWMP89UAAJB/query-layout1.png" alt="query-layout1" class="embedImage-img importedEmbed-img"></img><img src="https://us.v-cdn.net/6035534/uploads/6Q08IZE0KJY5/query-layout2.png" alt="query-layout2" class="embedImage-img importedEmbed-img"></img><img src="https://us.v-cdn.net/6035534/uploads/P3IHW35IY9MB/query-layout3.png" alt="query-layout3" class="embedImage-img importedEmbed-img"></img></td> <td>Toggle the layout between these three types.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/AO8JWMEPC25Z/query-fullscreen.png" alt="query-fullscreen" class="embedImage-img importedEmbed-img"></img></td> <td>Maximize the graph in full-screen mode.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/W0D7YPAKNIZ4/query-exit-full.png" alt="query-drag" class="embedImage-img importedEmbed-img"></img></td> <td>Exit full-screen mode.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/7AMHOU2GKFY8/query-camera.png" alt="query-camera" class="embedImage-img importedEmbed-img"></img></td> <td>Download the image.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/CCPCFLXTHB0Y/query-center.png" alt="query-center" class="embedImage-img importedEmbed-img"></img></td> <td>Center the graph.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/YCLB5DCRCTE3/query-undo.png" alt="query-undo" class="embedImage-img importedEmbed-img"></img></td> <td>Undo the action.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/QU2SOK12QAJG/query-eye.png" alt="query-eye" class="embedImage-img importedEmbed-img"></img></td> <td>Unhide hidden asset nodes. This control icon only displays when there are hidden nodes on the graph.</td> </tr></tbody></table><p>Here's a screenshot of a graph with the side property panel and filter panel open:</p> <p><img src="https://us.v-cdn.net/6035534/uploads/12QBCZ5JKYLJ/aws-inspector-guardduty-findings-graph.png" alt="" class="embedImage-img importedEmbed-img"></img></p> <p>If two assets have more than one relationship, click the arrow between the assets to open the details side panel that lists the relationships.</p> <p><img src="https://us.v-cdn.net/6035534/uploads/LASY7GKAOIFS/graph-relations.gif" alt="" class="embedImage-img importedEmbed-img"></img></p> <p><strong>Zoom and Move</strong></p> <p>You can move the graph in all directions with the directional arrows in the circle located in the bottom-right of the graph. Use the pointer/hand icon to toggle between your cursor type. Use the The +/- slider zooms in and out of the graph.</p> <p><img src="https://us.v-cdn.net/6035534/uploads/7JZVR73DSDRK/graph-new-move.png" alt="" class="embedImage-img importedEmbed-img"></img></p> <p>J1 Graph Viewer uses the same sets of controls.</p> <p>To learn more about queries and graphs, read the <a rel="nofollow" href="https://jupiterone.vanillacommunities.com/kb/articles/844-jupiterone-query-language-tutorial">J1QL tutorial</a>.</p> </article> </main>
.png)