02-12-2015 07:29 AM
How do I look for a specific file?
Ie what’s the field for “filename” ?
Using DQL report, I can find all files with extension “url”
What do I change to find a specific file (HELP_DECRYPT.URL)
FROM path
GET absname,
size AS size_bytes,
formatdate(created_on,'YYYY/MM/DD HH:MM:SS Z') AS creation_time,
formatdate(last_accessed,'YYYY/MM/DD HH:MM:SS Z') AS last_accessed_time,
formatdate(last_modified,'YYYY/MM/DD HH:MM:SS Z') AS last_modified_time
IF type = "FILE" AND
extension IN ("url")
SORTBY size DESC
02-13-2015 04:49 PM
Hey Darryl,
Based on a DQL example (IF clause), I believe filename would be "basename". The example from the UI:
FROM path
get name,
active_users.name
IF basename IN ("ssn.csv","credit_cards.csv")