Views

Views in the Secberus platform operate in a similar manner to database views from other relational database technologies. A "view" is a specific subset of data from the database organized in a particular way that may make it easier to work with for specific queries.

A "view" in the Secberus platform is always constructed from the result set of an SQL query. Any SQL query can be saved in the Data Explorer as a View. This allows additional queries to be constructed using the View, by name, in the query in the same way one would use a table.

For example, if there was a View named my_view in the View list, in the SQL editor, one could write the query:

sql

SELECT * FROM my_view;

While the query example above would be redundant as it would simply select everything from the view, it demonstrates that a view behaves the same as any other table in the platform.

There are two different kinds of views in the Data Explorer.

Secberus Managed Views

Every customer account comes pre-loaded with several views that Secberus manages for the core set of supported data sources. These are views that have been deemed by Secberus engineers to have a wide range of use cases and that are being used by Secberus in many cases to support some of Secberus' out-of-the-box policies.

Secberus managed views are usable in any custom queries and policies but are immutable for users. If a Secberus managed view is close to what you need, but would be more helpful with some modifications, users can copy the query that constitutes the view, modify it and use the modified version in their own custom views.

Custom Views

Users can create their own views in the Data Explorer. Custom views are constructed by first writing an SQL query in the SQL editor, and once the results of the query are those that are desired, clicking the "Save as View" button in the SQL Editor panel. Once a view is saved, it is visible to and usable by every other user of the Data Explorer within the same organization.