Query Rules
GEODI queries help you find, filter, classify, and analyze content across all connected data sources.
You can start with a word or phrase—just like a web search—and then narrow the results using file properties, dates, recognized data, permissions, locations, and other conditions.
The query can be used across different GEODI DSPM capabilities:
Search: Find relevant information across documents, emails, databases, images, and other content.
Discovery: Identify sensitive, risky, duplicated, or misplaced data.
Classification: Automatically classify content that matches defined conditions.
Data Analysis: Filter dashboards and reports to analyze a specific part of your data.
Workflows: Apply actions such as classification, masking, quarantine, or secure deletion to matching content.
Alarms: Receive notifications when matching content is discovered or changed.
Basic Search Rules
GEODI searches all content across the data sources connected to your project unless you narrow the scope.
In GEODI, content refers to any searchable item, such as a file, email, social media post, or database row.
Search is case-insensitive, so
GeorgiaandGEORGIAreturn the same results.By default, multiple search terms are combined with
AND. Therefore, you do not normally need to writeAND.
What do you want to find? | Query | Result |
|---|---|---|
A word |
| Contains Georgia |
Multiple words |
| Contains both words, not necessarily together. |
An exact phrase |
| Contains the complete phrase |
Either condition |
| Contains Georgia, Florida, or both |
Grouped alternatives |
| Contains Aquarium and either Georgia or Florida. Use parentheses when combining alternatives with other conditions: |
A word beginning with specific characters |
| Matches words such as Georgia or George |
A word ending with specific characters |
| Matches words ending in city |
Exclude a word |
| Contains Georgia but not Aquarium |
A word with uncertain spelling |
| Finds similar words, such as Berlin |
Predefined Queries
GEODI provides ready-to-use queries for common DSPM and discovery scenarios. These queries enable you to perform complex searches without having to understand all the underlying rules.
Predefined queries follow the same rules described in Basic Search. You can combine them with words, phrases, other predefined queries, AND, OR, parentheses, and - for exclusion.
Query | Finds |
|---|---|
predefined:PII | Personally identifiable information |
predefined:PCI | Payment card information |
predefined:CV | CVs and résumés |
predefined:Fraud | Content associated with potential fraud indicators |
predefined:O10Y | Content older than ten years |
predefined:PII customer | PII in content containing customer |
predefined:Fraud (invoice OR payment) | Potential fraud indicators in invoices or payment-related content |
predefined:PII predefined:O5Y | PII in content older than five years |
predefined:PII -predefined:CV | PII excluding CVs and résumés |
Search Scopes and Fields
Unless you specify a section, GEODI searches across all available sections of the content. Use a prefix to limit the search to a particular section or property. When a value contains spaces or multiple conditions, enclose it in parentheses.
Query prefix | Searches in | Example | Result |
|---|---|---|---|
| Content metadata, including document metadata and email subjects |
| Limits both words to the header. If you do not use parentheses, as in |
| Main document text or email message body |
| Main content containing both Georgia and Aquarium |
| Document name or type; a specialized subset of |
| PDF documents or content whose name begins with Georgia |
| Email sender or recipient |
| Emails sent from the |
| Content owner |
| Content owned by the active user or specified user |
| Connected data source |
OR
| Content discovered from the source |
| Searches in the given fieldname(s). |
| It should be enabled for Structured sources. GDE(feed) sources also provides extra fields to search. |
- Search by Dates
- Search by Hierarchy and Source
- Search by Discovery
- Search Duplicate or Similar Content
- Search on Ownership or Permissions
- Search on e-mails and domains
- Search by word proximity
- Search by Version
- Search by Image
- Search by Content Language
- E-Signed Documents: Search and View
- Alarms
- Sort result and ranking
- Content Status Queries
Sample Queries
We suggest you to try the following samples with your content. You will see how easy and effective to find content in’s no problem.
Jan-March 2017 doc:*.PDF Georgia |
If the document came via email, the rule remains the same. We specify the PDF just as we specify the email, as both are content types for GEODI. content:e-Mail Georgia |
We know that it was in a ZIP file. The document name was something “Geological..” and contains the the word wall. parent:*.ZIP doc:Geological* Wall |
You looked at hundreds of resumes during an HR process and made notes indicating your opinions. Now you want to find the resumes that received positive notes. |
Search for Georgia but not auarium. Georgia -Aqua* |
When you want to search a word and sinonims at the same time you may simply define a GEODI dictionary. The following queries may be identical using a single line dictionary: Artifical Intelligence AI Expert System |
Using just words in long documents may be misleading. Lets assume , a 10 page document first word in the first page, second word is in the last page. To prevent this situation you may use proximity rule that is (). Education() “High School” find High School within 10 words of education. Try removing () and see the result. Education “High School” 100..500GBP Words can be found close to currency expressions that fit the range. |