How to use Advanced Search

Search across all your cloud platforms, accounts, subscriptions and clusters including metadata, tags, metrics & tables.

What is Advanced Search?

Hyperglance Advanced Search gives you the power to find what you are looking for across your entire cloud infrastructure (AWS, Azure, Kubernetes), using almost any search criteria you can think of.

  • Search across all your cloud platforms
  • Filter your results by AWS Account, Azure Subscription or Kubernetes cluster.
  • Filter your results by resource type
  • Search inside associated tables (e.g. Security Group rules, Route Table entries)
  • Search Metrics (e.g. CPU, IO, Connections)
  • Specify AND/OR and NOT criteria
  • Search quickly using auto-complete tags or attributes, and/or use your own syntaxes

 

Enter your search criteria in the left-hand side to find the information you're after:

 

Syntax Guide

Including a syntax in your search is a great way to find the resource(s) that you're most interested in.

You can choose from a variety of options:

 

Value-Only

Syntax
Value

Enter a single value, without a colon, to find all the resources that match that value (searching across tags, attributes, and attribute values)

Example

Demo

This will find any resources that are tagged Demo, have an attribute called Demo, or have an attribute with a value that is Demo

 

Exact Match

Syntax
Key:Value

This will find resources where the Key (a tag or attribute) exactly matches your specified Value

Example

Account:Production

This will find all resources with an Account attribute that is Production

 

Partial Match (Contains)

Syntax
Key:PartialValue*

Add an asterisk to find resources where the Key (a tag or attribute) partially matches the Value you specify (Contains)

Example

Account:Prod*

This will find all resources with an Account attribute that starts with Prod

     

    Multiple Words

    Syntax
    'Key':Value
    "Key":Value

    Enter 'single' or "double" quote marks either side of your text to search for a term that contains spaces (searching across tags, attributes, and attribute values)

    Example

    "Alarm Severity":warning

    This will find any resources with an attribute called Alarm Severity and a value of warning

     

    Numerical & Text Comparison

    Syntax

    Less Than:

    <

    Greater Than:

    >

    Less Than Or Equal To:

    <=

    Greater Than or Equal:

    >=

    Equal To:

    =

    Not Equal To:

    !=

    If you'd like to compare numeric attributes or metrics, use the appropriate operator from this list. You can also use 'equal to' and 'not equal to' for text comparisons.

    Example

    Account!=Production

    This will find resources that are not in the Account called Production

     

    "Fuzzy" Tag Searching

    Syntax
    fuzzyHasTag("Key") = true
    fuzzyMatchTag("Key") = "Value"

    Search for resources tagged with keys "Like" the one you provide.

    This will strip all whitespace and non-alphanumeric characters when it compares the keys.

    Example

    fuzzyHasTag("hyp.App1")=true

    ^ This will find any resources tagged with a tag named "hyp.App1" or with any similar variants such as "HYP:app1" or "hypapp1" or "hyp_app1" etc.

    fuzzyMatchTag("hyp.App1.owner")="Maria"

    ^ This will find any resources tagged with a tag named "hyp.App1.owner" that have "Maria" as the value.  It will also successfully find resources even if the tag key has been spelled differently, such as "hyp:app1:owner" or "hyp_app1_owner".

     

    Date Comparison

    Syntax
    daysSince("Key")
    daysUntil("Key")
    hoursSince("Key")
    hoursUntil("Key")

    Where you have date attributes, e.g. 'Boot Time' or 'Expires At', you can convert those into days/hours until/since the current time

    Example

    daysUntil("Expires At")<=5

    This will find any resources with an attribute called Expires At, and the Expires At date is less than or equal to 5 days away

     

    Is Public IP

    Syntax
    isPublic("Key") = true

    This will find any IPv4 addresses that don't fall into RFC1918. i.e. are public IP addresses

    Example

    isPublic("Destination")=true

    This will find any IP that can be routed in the Public Internet, including 0.0.0.0

     

    Check if a tag or attribute is present or absent

    Syntax
    hasAttr("Key") = true
    hasAttr("Key") = false
    hasTag("Key") = true
    hasTag("Key") = false
    fuzzyHasTag("Key") = true
    fuzzyHasTag("Key") = false

    Find resources based on whether a particular attribute or a tag is present or absent.

    Example

    hasTag("Owner")=false

    This will find any resource that is lacking an "Owner" tag.

     

    Search Tips are displayed with the left panel to help remind you of these search guidelines:

     

    A Simple Search Example

    1. Select the Find resource of type dropdown in the top left-hand side, and choose an entity type. You can type to filter the dropdown, if you find that easier than selecting it from the list:

     

    2. For this example, we're using Amazon | Any/All Types. This includes all Amazon resource types, e.g. API Gateways, S3 Buckets, Subnets and Network Interfaces:

     

    3. Select one of the search boxes to reveal a list of all the attributes you can search against. You can type to filter the dropdown, if you find that easier than selecting it from the list:

     

    4. After choosing an attribute (in this example Region Name), you can enter its value. This auto-complete dropdown provides you with possible values from your resource data, but you can type in anything you want to, including partial values:

     

    5. You can either carry on adding more search criteria, or select 'Search' to see your results. In our example, we've chosen to search for all the resources where the Region Name is US East (N. Virginia):

     

    6. In your table of results, the matched column is highlighted blue, and you'll be shown 100 results per page:

     

    7. If you want to make the table wider, you can show/hide the left-hand search panel:

    expand-collapse-search

     

    8. You can add more conditions to refine your search. In this example, we've also specified that the resource Type must be Subnet:

    The table headers/key can be clicked to sort the data based on the values under it.

     

    Searching Associated Resources

    You can improve your search results, and make it easier to see the relational data within your network by further by adding (multiple) criteria for associated resources.

    An example of an (AWS) association would be Network Interfaces or Security Groups and EC2 Instances.

    In this example, we are looking for Production (Account), Active (Runtime State), Amazon EC2 Instances (Type), that have an associated Network Interface (Associated Type) with a Public IP (Associated Attribute).

    After selecting 'Search', you can expand the resulting rows to see the associated resources

    associated-search

     

    Searching Resource Metrics

    You can also search for resources using AWS CloudWatch or Azure metrics, adding as many criteria as you like. Here's how:

    1. Select 'Metric Search' from either the with/without these attributes field, depending on your requirement
    2. Choose the metric that you want to search from, e.g. CPU Utilization
    3. Enter the metric roll up (Average, Maximum, Minimum, Sum)
    4. Enter the metric period's duration (Hour, Day, Week, Month)
    5. Choose the comparison operator (<, >, <=, >=)
    6. Enter a numerical value
    7. Select Search

    In the example above, we're searching for Azure resources where the Average Percentage CPU value in the last Week has been Greater Than 0.

    A null value metric is treated as 0 (zero)

     

    Adding Exceptions to a Search

    Sometimes rules might flag up resources that you decide should not be included in the results (perhaps it is "ok" that a certain resource is open to the internet for example). In these cases you may want to add these resources as exceptions.

     

    Getting The Most From Your Search Results

    View Results in a Diagram

    Once you've found your set of resources, select Show In Diagram to view them in a contextual network diagram.

    We'd recommend you check out our guide to Hyperglance's diagrams

    Save your Search Criteria

    You can save your search criteria as a Rule using the Save As Rule option. A Hyperglance Rule is a saved search query that can help to continually monitor your cloud data, including notifications.

    We'd recommend you check out our guide to Rules in Hyperglance

    Export Your Results

    Choose Export To CSV if you'd like to export your search results for further analysis.

    View Your Cost

    You'll be able to see the total cost of the resources in your search results. Make sure you've enabled cost data in AWS and Azure.

    We'd recommend you check out our guide to saving cost using Hyperglance

    Run automation actions against your search results

    When enabled, you can run automation actions against some or all of the resources in your search results using the Run Action button.

    adv-search-2

    Or, if you are saving this search as a Rule and you want the action to run everytime the Rule is scheduled to run then use the Add Automation button on the left side:

    After using either of those buttons select the automated action you want to perform from the drop-down then click on 'Next'.

    adv-search-run-automations1

    Confirm the Automations

    adv-search-run-automations-confirm


    We'll be adding more advanced search features in the future. To get the latest updates, make sure you update your install.