Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

You can upload sample files to run against an entity type or policy to see the results for that file. Not only can this help you manually analyze a file, but it also allows you to test an entity type or policy to ensure you don’t need to add any additional elements to get the best results.

Note

The file size limit for an upload is 50MB.

  1. Click the ellipses (…) at the end of the row.

  2. Select Upload sample.

...

  1.  

  2. Select Upload on themodal that appears.

...

  1.  

  2. Use the dialog box that appears to select the file.

...

  1. DryvIQ displays the results of the analysis.

    Image Modified

  2. Select Done to close the modal

...

  1. .

 Understanding Results

The upload results will vary based on the entity type and what criteria it uses. Entity types that use only one criteria will list the item in the file that was matched and the confidence level for the match. The example below shows the results of a block list entity type.

...

If the entity type uses both regular expression patterns and keywords, the results identify how the item was matched. In the example below, each line was matched using different criteria:

  • Line 1 was matched using both a regular expression pattern and a keyword. Note that the confidence level is higher than the other results and that the keyword text is green.

  • Line 2 was matched using only the regular expression pattern; no keywords were found.

  • Line 3 was matched with a regular expression pattern and keywords, but negative keywords were also found, causing a keyword conflict. Because a negative keyword was found, the confidence level is 0%, and the keyword text is red.

  • Line 4 was matched using a regular expression pattern and a negative keyword; therefore, the match confidence is 0%.

...

If a policy contains a permissions action or entity type that requires data source configuration for accounts or groups, the sample upload against the policy will fail with an error if the configuration has not been completed. Complete the data source configuration and upload the sample again.