Skip to main content

Query Language Properties

Every Prisma Access Insights query must contain at least one property, and each property represents a data field that you want included in your query results. You provide your properties as an array of objects. For example:

"properties": [
    {
      "property": "edge_location_display_name"
    },
    {

      "property": "login_user_name",
      "function": "distinct_count",
      "sort": {
        "order": "desc",
        "sequence": 1
      }
    }
  ],

The data field identified in each property must be available in the resource you are querying.

Each property can include an alias for the property, a function to apply to the property, as well as sorting information.

Alias​

You can give a property an alias, which is used as a replacement name in the query's output. For example:

{
    "property":"state_instance",
    "alias":"mu_state_instance"
}

Properties Functions​

Functions can be applied to specified properties. For example:

{
  "property": "login_user_name",
  "function": "distinct_count"
}

The following functions can be used with the properties portion of the query:

  • sum

    Returns the sum of the values found for a property in the query set. Must be used with a property that contains a number.

  • min

    Returns the smallest value found for a property in the query set. Must be used with a property that contains a number.

  • max

    Returns the largest value found for a property in the query set. Must be used with a property that contains a number.

  • avg

    Returns the averages of the values found for a property in the query set. Must be used with a property that contains a number.

  • count

    Returns a count of the number of times the identified property is seen in the query set.

  • distinct_count

    Returns a count of the number of distinct (unique) values seen for the identified property in the query set.

  • distinct

    Returns all the distinct (unique) values seen for the identified property in the query set.

Properties Sort​

You can order the results of a function in either descending (desc) or ascending (asc) order. For example:

{

  "property": "login_user_name",
  "function": "distinct_count",
  "sort": {
    "order": "desc",
    "sequence": 1
  }
}