Search for change requests

This topic describes how to perform a simple search for change requests, as well as how to perform and manage advanced searches.

Perform a simple search

This procedure describes how to perform a simple text based search for details in change request parameters or histories.

Tip: FireFlow also includes advanced search options. For details, see Define an advanced search.

Do the following:

  1. In the main menu on the left, enter your search query in the Search field.

    Enter any of the following:

    • A change request ID number
    • Status
    • Queue
    • Owner name
    • Requestor email address
    • Subject

    To search across all change request histories, enter your search term using the following syntax:

    fulltext:<search term>

    Note: Searching the full change request history can take a long time.

    For more details, see FireFlow simple search process.

  2. Click .

    The Found page appears displaying search results.

    Do one of the following:

    • To sort your results, click the column heading that you want to sort by. Click the heading again to reverse the sort order.
    • To view a specific change request, click the ID number or subject.

    For more details, see Simple Search Results Columns.

Back to top

Search by rule

This procedure describes how to search for all traffic change requests whose requested change intersects with a specific device rule.

Note: This feature supports new change requests created in FireFlow v6.0 and above. Change requests created in earlier versions are only partially supported and may not be returned in the search results.

Note: This procedure can also be performed from within AFA reports.

Do the following:

  1. In the main menu, click Search By Rule.

    The Search for change requests by device rule page is displayed.

  2. Select the desired device from the drop-down list and click Go.

    The Search for change requests by device rule page appears displaying all rules and objects for the device.

    To view all change requests related to a specific rule, in the Policies table, next to the desired rule, click .

  3. The change requests related to the rule are displayed.

    Note: The search results include change requests that did not require policy changes (those that were marked as "Already Works").

    Note: If you selected a Check Point or Juniper NSM device, change requests are displayed for all devices that are installed with the same policy as the selected device.

Back to top

Define an advanced search

This procedure describes how to define an advanced search for FireFlow change requests.

Tip: Alternately, perform a simple search. For details, see Perform a simple search.

Do the following:

  1. In the Query Builder page's Add Criteria area, specify the search criteria.

    Do the following:

    1. In the Aggregator field, choose the aggregator to use between search criteria.

    2. To search according to criteria related to the device, the requested change, the planned change, and risk check results, do the following:

      1. In the Queue row, select Firewalls.
      2. Click Add these terms.

        Additional rows appear in the Add Criteria area.

    3. For each row in the Add Criteria area, define your search criteria by selecting change request properties and operators and entering a value for each property.

      For example: Owner is johnS (John Smith)

      For more details, see:

    4. Click Add these terms.

      The specified criterion is added to the Current Search area. The selected aggregator is used between the criteria.

      Use the buttons in this dialog to do any of the following:

      • Move a selected criterion up or down
      • Increase or decrease indentation for a selected criterion
      • Toggle the selected aggregator (and/or)
      • Delete a selected criterion
      • Perform an advanced query edit. For more details, see Advanced query edits.
  2. Specify how the search results should appear, by doing the following:

    1. Scroll to the Display Columns area.

    2. For each column you want to appear in the search results, do the following:

      1. In the Add Columns box, select a column you want to appear.
      2. Complete the fields in the Format area. For details, see Advanced search column format fields.
      3. Click .

        The column appears in the Show Columns box. The order that the columns appear in the box (top to bottom) represents the order in which they will appear in the search results (left to right).

      4. To move the column up or down in the box, select the column and click the or buttons.
      5. To delete the column, select it and click Delete.
    3. Scroll to the Sorting area.

    4. In the Order by area, specify the default sort order of the search results as follows:

      1. In the left-side fields, select one or more columns according to which the search results should be sorted.
      2. In the right-side fields, select the sort order to use for each specified column: ascending (Asc) or descending (Desc).
    5. In the Rows per page field, select the number of search result rows that should appear in each page.
  3. To remove all of your changes and define a new search, in the main menu, click New Search.

Back to top

Save an advanced search

Save an advanced search to load and run the same search again, or regularly display the search results on your FireFlow home page.

For more details, see Load a saved search and Customize the FireFlow Home page.

Do the following:

  1. In the Query Builder page, define a search. For details, see Define an advanced search.

  2. Scroll to the Saved Searches area.

  3. In the Privacy drop-down list, specify who should be allowed to load this search:

    My saved searches Make this search available to yourself only.
    Admin's saved searches Make this search available to all administrators
    Controller's saved searches Make this search available to all controllers
    Network's saved searches Make this search available to all network operations users
    Security saved searches Make this search available to all information security users
    FireFlow's saved searches Make this search available to all FireFlow users.
  4. In the Description field, type a name for the search.
  5. Click Save.

The search is saved and will be available to the specified user role for loading.

Back to top

Export Advanced Search Results to Spreadsheet

You can export your results to an RSS file or a spreadsheet. The following are the instructions for creating a spreadsheet from your results that will only show columns defined in your search.

  1. From the search results display, click Export .

  2. Select the Spreadsheet (Current Fields) option to create a file containing only fields defined in your search request or defined by default.

    Note: Selecting Spreadsheet (All fields) creates a file containing all the possible fields, including fields that are empty, not required and not included in your search criteria.

  3. Open the downloaded * .TSV file with Excel and save it with the name of your choice.


Back to top

Load a saved search

This procedure describes how to load a saved advanced search.

For more details, see Define an advanced search and Save an advanced search.

Do the following:

  1. In the Query Builder page, reveal the Saved Searches area.

    The Saved Searches area appears.

  2. In the Load saved search drop-down list, select the search you want to load.
  3. Click Load.

The search is loaded.

Back to top

Copy a saved search

If you want to create and save a new advanced search that is similar to an existing saved search, you can copy the saved search.

Do the following:

  1. Load the search you want to copy. For details, see Load a saved search.
  2. Click Save as New.

    The Description field displays the name of the original search, followed by the word "copy".

    For example, "Resolved Change requests copy"

  3. In the Description field, modify the search name as desired.
  4. Modify the search criteria as desired. For details, see Define an advanced search.
  5. Click Update.

The search is saved with the same privacy settings as the original search, and will be available to that user role for loading.

Back to top

Delete a saved search

Delete any advanced search that you've saved in FireFlow.

Do the following:

  1. Load the search you want to delete. For details, see Load a saved search.
  2. Click Delete.

The search is deleted.

Back to top

Advanced search example

The following example describes a sample use case for an advanced search in FireFlow.

  • Debbie, a company employee, wants to know the status of a specific change request.
  • She calls Ned, a FireFlow administrator for help.
    • Debbie cannot remember the change request ID number, aside that it was above 15.

    • Ned remembers handling the change request himself, and is certain that he did not reject it, but also does not have the specific ID.

    Debbie has since hung up, but now Ned is concerned that he missed the expiration date and wants to be sure to handle it.

    Ned does the following:

    1. In FireFlow, he clicks Advanced Search in the main menu on the left.

    2. On the Query Builder page, in the Add Criteria area, Ned defines the search query as follows:

      • Ned selects the AND aggregator
      • In the ID row, Ned selects the greater than operator, and enters a value of 15.

      • In the Status row, Ned selects the isn't operator and then selects the rejected value from the dropdown on the right.

      • In the Owner row, Ned selects the is operator and enters Ned as the value.

      • In the Requestor EmailAddress row, Ned switches the field to Requestor RealName, selects the matches operator, and then enters Debbie as the value.

    3. Ned clicks Add these terms to add the specified criteria to the Current search area.

    4. In the Display columns area, Ned does the following:

      1. Selects Due in the Add Columns box.
      2. Selects Take in the Link drop-down list.
      3. Enters Due Date in the Title field.
      4. Selects Large in the Size drop-down list.
      5. Selects Bold in the Style drop-down list.
      6. Clicks to add the columns to the Show Columns box on the right.

    1. Ned clicks Search to start searching for Debbie's change request.

    Back to top