Searching Reports
Finding the reports you need
We have implemented a series of powerful search functions into the Reports pages for all reports so that you can always find exactly the data you need. This guide will focus on the CSP Reports page but the techniques will work on any other Reports page.
Action
This filter is only present on appropriate Reports page, like CSP, and allows you to filter between reports that were delivered as part of an enforced policy, a report only policy or both. Simply select the appropriate value from the Action dropdown and click the Filter button.
Date
You can filter the reports you'd like to see based on a particular hour*, day or month. Select the appropriate time unit from the dropdown and then click the date field to select the appropriate value. Once selected, click the Filter button to apply the changes.
URI / URL / Domain
Hostname
Searching on a hostname is simple and straightforward, simply enter the hostname you wish to see reports for and click the Filter button to update the table. The field will show suggestions based on the entries found in the 'Hosts to collect reports for' field on the Filters page.
Example values: example.com, test.com, sub.site.com
You can also use a wildcard as the leftmost component in the hostname field. This allows you to search for subdomains or variants of a given domain. Please note that the wildcard character when searching Certificate Transparency reports is % and not *.
Search for subdomains: *.example.com (all subdomains of example.com)
Search for partial domain: *-example.com (would find test-example.com and dev-example.com)
Search for subdomains in Certificate Transparency: %.example.com (all subdomains of example.com)
There is also a 'not' filter which can be used to exclude a particular domain from search results.
Exclude a domain: !test.com (all reports except those for test.com)
Combining multiple filters to build powerful queries is also possible and can be done with a space, comma or semi-colon separated list.
Subdomains of two domains: *.example.com, *.test.com
Exclude particular subdomain: *.site.com, !test.site.com
Using all filters: test.com, *.example.com, !test.example.com
Path
Searching on a path is also simple and straightforward with only a few changes from the search capabilites for hostnames shown above.
Examples values: /account/users/, /store/, /contact/
You can use a wildcard as the rightmost component of a path to search for subdirectories.
Search for all users: /profiles/user/*
Search for all items: /store/item/*
If that produces a lot of results you can also ask for them to be combined.
Aggregate users results down to a single row: /profiles/user/{agg}
Search for all users and items: /profiles/user/{agg}, /store/item/{agg}
The 'not' filter can also be used to exclude specific paths from the results.
Exclude test account: !/profiles/user/test
Exclude test item: !/store/item/1234
You can also combine multiple of any of the above filters to build a powerful query.
Search for users: /profiles/user/{agg}, !/profiles/user/admin, , !/profiles/user/test
Search for items: /store/item/*, !/store/item/1234, !/store/item/4321
Because {agg} provides the same results as *, just presented differently there's no benefit to doing /profiles/user/{agg} , /profiles/user/*.
You can combine them on different paths though.
Search for users and items: /profiles/user/{agg}, /store/item/*, !/profiles/user/admin, !/profiles/user/test
Count
The count column indicates the number of occurrences of a particular report but also allows you to filter based on the browser and platform that the report was sent from. The first dropdown field allows you to select the browser while the second dropdown field allows you to select the platform.
Select the appropriate value from either or both dropdowns and then click the Filter button to apply the changes.
* Limited on free accounts.