Performing Identity Graph Searches for Data Discovery

You can perform a real-time identity graph search to locate data subjects in your data sources based on identifier-value pairings. This will return all possible results for each data source that contains an instance of the search criteria, if that identifier has already been indexed. Please be advised that possible instances within a data source may not be reflected in the results if that particular data source has yet to be scanned in full.

Important:

Because search indices are stored locally on the worker node within the Elasticsearch pod, identity searches will not function if the associated worker node is down or not updated to the latest version.

To search for data subjects

  1. On the Data Discovery menu, select Targeted Discovery > Identity graph. The Identity graph screen appears.

  2. In the Search tab, enter a unique combination of identifiers plus your desired data value to define the accuracy of the search results.

    This field will populate all system and custom classifiers.



    Note:

    For more information on the available system classifiers provided by OneTrust, see Using System Classifiers for Discovery.

    For more information on the creating custom classifiers, see Using Custom Classifiers for Discovery.

  3. Click the Search button.


  4. The screen will populate all possible results for any data sources containing the criteria.

    Use the collapse-expand option to select between the available data sources and view the discovered identifier-value pairings as well as the returned Field Name, System, and Path details.



  5. You can add more identifiers here to narrow your search results.


To delete index results

If your organization fulfills a deletion request on behalf of a data subject, you will also need to remove their data from the Data Discovery index. The Identity graph screen allows you to locate any possible instances in your data sources and remove them to comply with this request.

  1. In the Search tab, click the Delete Index button. The Delete Index modal appears.

  2. Click the Confirm button. The index for this search criteria will be deleted and cannot be restored unless a new scan is ran.


  3. The index deletion will also be logged in the Activities tab for auditing. For more information, see To check the activity log

To check the activity log

You can audit the executed searches and actions taken by your users in the Activities tab of the Identity graph screen.

  1. On the Data Discovery menu, select Targeted Discovery > Identity graph. The Identity graph screen appears.

  2. Navigate to the Activities tab.
  3. Use the collapse-expand options to review the executed data searches. Each entry will log the OneTrust user, the timestamp, and which identifier pairing they searched.