Applies To: WatchGuard Data Control
To narrow the scope of search results, you can perform flexible searches with plain text and specific parameters. For information on how to create a guided or advanced search, see Create Advanced Searches in Data Control.
These sections provide information on search syntax for different types of searches:
Word — Search for "word" in the document content and metadata.
WordA WordB — Search for "worda" or "wordb" (logical Boolean operator OR) in the document content.
"WordA WordB" — Search for "worda" and "wordb" consecutively in the document content.
+WordA +WordB — Search for "worda" and "wordb" in the document content.
+Worda -Wordb — Search for "worda" but not "wordb" in the document content.
Word* — Search for all words that start with "word". The wildcard * is only allowed at the end of the search keyword.
Wo?rd — Search for words that begin with "wo", and end in "rd" and have a single character in between. The character ? can be located at any point, except the first character.
Word~ — Search for all words that contain the string "word".
Guided searches do not allow + or - characters. Instead, you enter search words in different text boxes.
If you use the characters + or -, they form part of the search keyword.
To narrow the scope of results, Data Control supports the use of qualifiers to indicate data types or file characteristics in quick and advanced searches:
- PiiType — Specifies the type of PII data detected in the file.
- HasPii — Indicates that the file has PII data.
- Filename — Indicates the name of the file.
- FileExtension — Indicates the file extension.
The values allowed in these qualifiers are:
- PiiType:BANKACCOUNT — Files that contain any bank account details.
- PiiType:CREDITCARD — Files that contain any credit card details.
- PiiType:IDCARD — Files that contain any national ID card numbers (or similar).
- PiiType:SSN — Files that contain any social security numbers.
- PiiType:IP — Files that contain any IP addresses.
- PiiType:EMAIL — Files that contain any email addresses.
- PiiType:PHONE — Files that contain any phone numbers.
- PiiType:ADDRESS — Files that contain any postal addresses.
- PiiType:FULLNAME — Files that contain any first names and last names.
- PiiType:PASSPORT — Files that contain any passport details.
- PiiType:DRIVERLIC — Files that contain any driving license details.
- HasPii:True — Files that contain any PII data.
- Filename:"file name" — Files with the specified file name.
- Fileextension: "file extension" — Files with the specified file extension.
You can use PII data types in all searches (quick or guided), either alone or combined with other character strings.
- PiiType:IDCARD — Search for files with ID card data detected.
- +PiiType:IDCARD +"WatchGuard" — Search for files that contain a list of ID card details in the company (with the character string "WatchGuard").
- +Filename:scan* +fileextension:docx -PiiType:fullname — Search for scan files (files with names that start with "scan") in Word documents (.DOCX extension), and that are not officially signed (no Fullname — first names and last names — were detected).
Search Files with Data Control
Create Advanced Searches in Data Control