- Platform Release 6.5
- Privacera Platform Release 6.5
- Enhancements and updates in Privacera Access Management 6.5 release
- Enhancements and updates in Privacera Discovery 6.5 release
- Enhancements and updates in Privacera Encryption 6.5 release
- Deprecation of older version of PolicySync
- Upgrade Prerequisites
- Supported versions of third-party systems
- Documentation changelog
- Known Issues 6.5
- Platform - Supported Versions of Third-Party Systems
- Platform Support Policy and End-of-Support Dates
- Privacera Platform Release 6.5
- Privacera Platform Installation
- About Privacera Manager (PM)
- Install overview
- Prerequisites
- Installation
- Default services configuration
- Component services configurations
- Access Management
- Data Server
- UserSync
- Privacera Plugin
- Databricks
- Spark standalone
- Spark on EKS
- Portal SSO with PingFederate
- Trino Open Source
- Dremio
- AWS EMR
- AWS EMR with Native Apache Ranger
- GCP Dataproc
- Starburst Enterprise
- Privacera services (Data Assets)
- Audit Fluentd
- Grafana
- Ranger Tagsync
- Discovery
- Encryption & Masking
- Privacera Encryption Gateway (PEG) and Cryptography with Ranger KMS
- AWS S3 bucket encryption
- Ranger KMS
- AuthZ / AuthN
- Security
- Access Management
- Reference - Custom Properties
- Validation
- Additional Privacera Manager configurations
- Upgrade Privacera Manager
- Troubleshooting
- How to validate installation
- Possible Errors and Solutions in Privacera Manager
- Unable to Connect to Docker
- Terminate Installation
- 6.5 Platform Installation fails with invalid apiVersion
- Ansible Kubernetes Module does not load
- Unable to connect to Kubernetes Cluster
- Common Errors/Warnings in YAML Config Files
- Delete old unused Privacera Docker images
- Unable to debug error for an Ansible task
- Unable to upgrade from 4.x to 5.x or 6.x due to Zookeeper snapshot issue
- Storage issue in Privacera UserSync & PolicySync
- Permission Denied Errors in PM Docker Installation
- Unable to initialize the Discovery Kubernetes pod
- Portal service
- Grafana service
- Audit server
- Audit Fluentd
- Privacera Plugin
- How-to
- Appendix
- AWS topics
- AWS CLI
- AWS IAM
- Configure S3 for real-time scanning
- Install Docker and Docker compose (AWS-Linux-RHEL)
- AWS S3 MinIO quick setup
- Cross account IAM role for Databricks
- Integrate Privacera services in separate VPC
- Securely access S3 buckets ssing IAM roles
- Multiple AWS account support in Dataserver using Databricks
- Multiple AWS S3 IAM role support in Dataserver
- Azure topics
- GCP topics
- Kubernetes
- Microsoft SQL topics
- Snowflake configuration for PolicySync
- Create Azure resources
- Databricks
- Spark Plug-in
- Azure key vault
- Add custom properties
- Migrate Ranger KMS master key
- IAM policy for AWS controller
- Customize topic and table names
- Configure SSL for Privacera
- Configure Real-time scan across projects in GCP
- Upload custom SSL certificates
- Deployment size
- Service-level system properties
- PrestoSQL standalone installation
- AWS topics
- Privacera Platform User Guide
- Introduction to Privacera Platform
- Settings
- Data inventory
- Token generator
- System configuration
- Diagnostics
- Notifications
- How-to
- Privacera Discovery User Guide
- What is Discovery?
- Discovery Dashboard
- Scan Techniques
- Processing order of scan techniques
- Add and scan resources in a data source
- Start or cancel a scan
- Tags
- Dictionaries
- Patterns
- Scan status
- Data zone movement
- Models
- Disallowed Tags policy
- Rules
- Types of rules
- Example rules and classifications
- Create a structured rule
- Create an unstructured rule
- Create a rule mapping
- Export rules and mappings
- Import rules and mappings
- Post-processing in real-time and offline scans
- Enable post-processing
- Example of post-processing rules on tags
- List of structured rules
- Supported scan file formats
- Data Source Scanning
- Data Inventory
- TagSync using Apache Ranger
- Compliance Workflow
- Data zones and workflow policies
- Workflow Policies
- Alerts Dashboard
- Data Zone Dashboard
- Data zone movement
- Workflow policy use case example
- Discovery Health Check
- Reports
- How-to
- Privacera Encryption Guide
- Overview of Privacera Encryption
- Install Privacera Encryption
- Encryption Key Management
- Schemes
- Encryption with PEG REST API
- Privacera Encryption REST API
- PEG API endpoint
- PEG REST API encryption endpoints
- PEG REST API authentication methods on Privacera Platform
- Common PEG REST API fields
- Construct the datalist for the /protect endpoint
- Deconstruct the response from the /unprotect endpoint
- Example data transformation with the /unprotect endpoint and presentation scheme
- Example PEG API endpoints
- /authenticate
- /protect with encryption scheme
- /protect with masking scheme
- /protect with both encryption and masking schemes
- /unprotect without presentation scheme
- /unprotect with presentation scheme
- /unprotect with masking scheme
- REST API response partial success on bulk operations
- Audit details for PEG REST API accesses
- Make encryption API calls on behalf of another user
- Troubleshoot REST API Issues on Privacera Platform
- Privacera Encryption REST API
- Encryption with Databricks, Hive, Streamsets, Trino
- Databricks UDFs for encryption and masking on PrivaceraPlatform
- Hive UDFs for encryption on Privacera Platform
- StreamSets Data Collector (SDC) and Privacera Encryption on Privacera Platform
- Trino UDFs for encryption and masking on Privacera Platform
- Privacera Access Management User Guide
- Privacera Access Management
- How Polices are evaluated
- Resource policies
- Policies overview
- Creating Resource Based Policies
- Configure Policy with Attribute-Based Access Control
- Configuring Policy with Conditional Masking
- Tag Policies
- Entitlement
- Service Explorer
- Users, groups, and roles
- Permissions
- Reports
- Audit
- Security Zone
- Access Control using APIs
- AWS User Guide
- Overview of Privacera on AWS
- Configure policies for AWS services
- Using Athena with data access server
- Using DynamoDB with data access server
- Databricks access manager policy
- Accessing Kinesis with data access server
- Accessing Firehose with Data Access Server
- EMR user guide
- AWS S3 bucket encryption
- Getting started with Minio
- Plugins
- How to Get Support
- Coordinated Vulnerability Disclosure (CVD) Program of Privacera
- Shared Security Model
- Privacera Platform documentation changelog
Reports with the Query Builder
With the Query Builder, you can create reports using Privacera-supplied and custom filters.
There are two types of queries:
Privacera-supplied: Dropdown menus to specify values of fields that must be included in the search results.
Query Filters : Allow you specify fields that must or must not be included in the search results.
Access the Query Builder
To access the Query Builder, follow these steps:
From the navigation menu, select Reports > Built-in Reports.
Select View or Edit Report to open either Data Discovery Overview or Discovery Alerts.
The Query Builder page is displayed.
The Privacera-supplied filters are shown at the top. Search results are displayed at the bottom.
From left to right across the top:
Partial or full match of the data
Dropdown menus to search by Application, Tag, Datazone, or to exclude a certain resource.
Search by location.
Search only the last seven days.
Scan type: either Offline or Realtime.
Group Folders in the output.
Group Tables in the output.
Available filters
The following filters are the basis for both the Privacera-supplied search and custom Query Filters.
Filter | Description |
---|---|
Application | The application running on the asset, such as a web server or database. |
Tags | User-defined information fields you have applied to assets. |
Tag Attributes | Additional criteria on those tags to further refine the information. |
Datazone | Your logical grouping of the assets by type or security level of the data |
Datazone Owner | The registered user or group that manages that datazone |
About the Scan Type filter
The Scan Type dropdown menu has the following selections:
Offline: The report is based on the most recently stored data collected from the assets by Privacera.
Realtime: The report is based on data collected from the assets at the time the report is run. Depending on the number of assets you have, network latency, and other considerations, generating a realtime report might require that you be patient for the results.
Use the Query Builder
This is a general approach to using the Query Builder. As you become more familiar with the tool, you will refine this general approach for your needs.
Prerequisites:
Be sure you have a good understanding of the types of information you have associated with your cloud-based assets: the applications, tags, datazones, and other categories. See Available filter fields.
Decide on the fields that will display the information you want to see. For instance, are you interested in the applications or the datazones or both?
To use the Query Builder, follow these steps:
From the dropdown menus on the Query Builder page, select the fields you want to see.
As you make selections, total counts of the assets in various categories based on your selection criteria and the complete results of the search are dynamically displayed.
Look at the output to determine if you have the data you want to see. You can adjust the menu selections to further refine the results. You can also use Query Filters to tailor the output to your needs.
Save or export a report
To reuse a search at a later time, click Save and enter a name for the search.
To download a copy of the resulting data in Comma-Separated Value (CSV) format, click Export to CSV and follow the leading prompts.
Create custom reports with Query Filters
Using Query Filters, you can find and view precise information about your cloud-based assets.
Conditions, filters, “Are”, and “Are Not”
You can define certain conditions to filter the data to select the assets you are interested in. These filters are listed in Available filter fields. You set these conditions as either Are applicable (the filter must match) or Are Not applicable (the filter must not match) to the assets you are interested in.
You can combine multiple conditions to further refine your search.
Enable Query Filters
To enable Query Filters:
From the navigation menu, select Reports > Built-in Reports.
Click View or Edit Report to open either Data Discovery Overview or Discovery Alerts.
Enable Query Filters using the Query Filters toggle.
Apply Query Filters
This is a general approach to using Query Filters. As you become more familiar with the tool, you will refine this general approach for your precise needs.
Prerequisites:
Be sure you have a good understanding of the types of information you have associated with your cloud-based assets: the applications, tags, datazones, and other categories. See Available filter fields.
Decide the condition or conditions that will display the information you want to see. For instance, are you interested in the applications or the datazones or both?
To apply Query Filters, follow these steps:
Enable Query Filters using the Query Filters toggle.
Select Add Condition.
From the dropdown menus for the condition:
On the left, select the needed filter.
In the middle, specify whether that filter is applicable (Are) or not applicable (Are Not) to the search.
On the right, enter a string that matches what you are interested in.
A list of matching data is displayed from which you can select the exact field. The Query Preview on the right shows a text representation of the query.
Add more conditions, if required. To add another condition, specify AND to indicate that the condition is required or OR to indicate that the condition is optional.
After you have added all required conditions, click Search.
The total counts of the assets in various categories based on your filter criteria and the complete results of the search are displayed.