Community
Questions Library
Docs
Blog
Events
Swag
Github
Slack
JupiterOne
Discussions
Release Notes
Navigating the JupiterOne Graphs - AskJ1 Community
<main> <article class="userContent"> <p>J1 is built on a data-driven graph platform. For the story that inspired J1 to build it, read <a rel="nofollow" href="https://jupiterone.com/blog/three-dimensional-security/">the J1 blog</a>.</p> <p>JupiterOne Query Language (J1QL) is designed to traverse this graph and return a subgraph, or data from the nodes (assets) and edges (relationships) of a subgraph. You can view and interact with the subgraph from any J1QL query result.</p> <p>This documentation focuses on interacting with the graph component. For more details on J1QL, read the <a rel="nofollow" href="https://jupiterone.vanillacommunities.com/kb/articles/844-jupiterone-query-language-tutorial">J1QL tutorial</a> and <a rel="nofollow" href="https://jupiterone.vanillacommunities.com/kb/articles/980-introduction-to-jupiterone-query-language-j1ql">technical doc</a>.</p> <p>This is an example result graph from a query in the Search for Anything app:</p> <p><img src="https://us.v-cdn.net/6035534/uploads/PRFC272EUDIF/j1ql-tutorial-root-accounts-graph.png" alt="" class="embedImage-img importedEmbed-img"></img></p> <p>The first set of controls in the upper-right corner comprises:</p> <table><thead><tr><th align="center">Control</th> <th align="left">Function</th> </tr></thead><tbody><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/JRLL13L67ZZN/query-eye.png" alt="query-eye" class="embedImage-img importedEmbed-img"></img></td> <td align="left">Switch views between <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">Table</code>, <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">Graph</code>, <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">Raw JSON</code>, and <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">Pretty JSON</code>.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/32QQNZ5XVYDC/query-share.png" alt="query-share" class="embedImage-img importedEmbed-img"></img></td> <td align="left">Export and share the query by sharing a link or downloading as a CSV or JSON file.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/RQQHTD9KIEES/query-copy.png" alt="query-copy" class="embedImage-img importedEmbed-img"></img></td> <td align="left">Copy the query to the clipboard to reuse.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/511IMJIFQ72Y/query-save.png" alt="query-save" class="embedImage-img importedEmbed-img"></img></td> <td align="left">Save the query shows a modal popup where you can provide a title, description, and, optionally, some tags to save it to your own query library.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/LW9J7VAE9J50/query-close.png" alt="query-close" class="embedImage-img importedEmbed-img"></img></td> <td align="left">Close and remove the results for this specific query/question from the page view.</td> </tr></tbody></table><p>Selecting any node on the graph displays a set of controls directly on top of it that allows you to interact with the node. The controls provide the following functions:</p> <table><thead><tr><th align="center">Control</th> <th>Function</th> </tr></thead><tbody><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/J3C72KB5GP0I/query-properties.png" alt="query-properties" class="embedImage-img importedEmbed-img"></img></td> <td>Open the side panel to show the detailed properties, tags, and metadata of the selected asset. You can select an edge and see the relationship properties in the side panel as well.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/MDBN8NDPQBXD/query-show-more.png" alt="query-show-more" class="embedImage-img importedEmbed-img"></img></td> <td>Display additional asset nodes that are directly connected to the selected asset but are not yet loaded into the graph.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/F9Q72R4BSWEJ/query-hide.png" alt="query-hide" class="embedImage-img importedEmbed-img"></img></td> <td>Hide the asset from the graph to reduce clutter. You can unhide all hidden assets from the bottom-left control.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/K7GV6OTWYJV4/query-explan.png" alt="query-explan" class="embedImage-img importedEmbed-img"></img></td> <td>Expand grouped nodes of the same type that have the same parent nodes. This option may not be always available depending on the data in the graph.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/IE3LBHW3WRAJ/query-collapse.png" alt="query-collapse" class="embedImage-img importedEmbed-img"></img></td> <td>Collapse nodes of the same type that have the same parent nodes into a group. This option may not be always available depending on the data in the graph.</td> </tr></tbody></table><p>The last set of controls are at the bottom-left of the graph, and they provide the following functions:</p> <table><thead><tr><th align="center">Control</th> <th>Function</th> </tr></thead><tbody><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/WJ2XMWACS4O5/query-filter.png" alt="query-filter" class="embedImage-img importedEmbed-img"></img></td> <td>Open the filter panel to show or hide assets on the graph by account and/or type.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/C07JLLBKAYGY/query-lock.png" alt="query-lock" class="embedImage-img importedEmbed-img"></img></td> <td>Lock the movement of connected assets.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/J4L6BGVP4CZR/query-layout1.png" alt="query-layout1" class="embedImage-img importedEmbed-img"></img><img src="https://us.v-cdn.net/6035534/uploads/RPBCMWB90AHD/query-layout2.png" alt="query-layout2" class="embedImage-img importedEmbed-img"></img><img src="https://us.v-cdn.net/6035534/uploads/465E1F05X246/query-layout3.png" alt="query-layout3" class="embedImage-img importedEmbed-img"></img></td> <td>Toggle the layout between these three types.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/5QZCZPP72KER/query-fullscreen.png" alt="query-fullscreen" class="embedImage-img importedEmbed-img"></img></td> <td>Maximize the graph in full-screen mode.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/8FXL8WSEBV3F/query-exit-full.png" alt="query-drag" class="embedImage-img importedEmbed-img"></img></td> <td>Exit full-screen mode.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/T77FO2PT0QDV/query-camera.png" alt="query-camera" class="embedImage-img importedEmbed-img"></img></td> <td>Download the image.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/U63AB04XT1N4/query-center.png" alt="query-center" class="embedImage-img importedEmbed-img"></img></td> <td>Center the graph.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/BU4KAND63A0G/query-undo.png" alt="query-undo" class="embedImage-img importedEmbed-img"></img></td> <td>Undo the action.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/JRLL13L67ZZN/query-eye.png" alt="query-eye" class="embedImage-img importedEmbed-img"></img></td> <td>Unhide hidden asset nodes. This control icon only displays when there are hidden nodes on the graph.</td> </tr></tbody></table><p>Here's a screenshot of a graph with the side property panel and filter panel open:</p> <p><img src="https://us.v-cdn.net/6035534/uploads/G95OF7LU1SD9/aws-inspector-guardduty-findings-graph.png" alt="" class="embedImage-img importedEmbed-img"></img></p> <p><strong>Zoom and Move</strong></p> <table><thead><tr><th align="center">Control</th> <th>Function</th> </tr></thead><tbody><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/TCPXXE8OOOHS/query-zoom-in.png" alt="query-zoom-in" class="embedImage-img importedEmbed-img"></img><img src="https://us.v-cdn.net/6035534/uploads/6HAXWAIH37RM/query-zoom-out.png" alt="query-zoom-out" class="embedImage-img importedEmbed-img"></img></td> <td>Scroll using your mouse/touchpad to zoom in/out on the graph.</td> </tr><tr><td align="center"><img src="https://us.v-cdn.net/6035534/uploads/YFYCVFJBOM1P/query-drag.png" alt="query-drag" class="embedImage-img importedEmbed-img"></img></td> <td>Click and drag on a blank spot on the graph using your mouse/touchpad to move the graph. Click and drag on a selected asset node to move that particular node.</td> </tr></tbody></table><p>The Graph Viewer app uses the same sets of controls.</p> <p>To learn more about queries and graphs, read the <a rel="nofollow" href="https://jupiterone.vanillacommunities.com/kb/articles/844-jupiterone-query-language-tutorial">J1QL tutorial</a>.</p> </article> </main>
.png)