search_aggregate
Perform aggregate queries on SailPoint search indices to analyze identity data through counts, groupings, and metrics for governance insights.
Instructions
Perform aggregate queries on search indices for analytics (counts, groupings, etc.).
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| indices | Yes | Indices to aggregate | |
| query | No | Search query to filter documents | |
| aggregationType | Yes | Type of aggregation | |
| aggregationField | Yes | Field to aggregate on (e.g., 'department', 'source.name') | |
| limit | No | Maximum buckets for terms aggregation |