Search strings are constructed by specifying a default property value and one of the four types of key-value pairs as follows:

• Technical metadata key-value pairs - key:value
  • key is one of the properties listed in Searchable Properties Reference.
  • value is a single value or range of values specified as [value1 TO value2]. In a value, * is a wildcard. In property values, you must escape special characters :, -, /, and * with the backslash character (\), or enclose the property value in quotes.
  Technical metadata key-value pairs are read-only and cannot be modified.
• Custom metadata key-value pairs - up_key:value
  • key is a user-defined property.
  • value is a single value or range of values specified as [value1 TO value2]. In a value, * is a wildcard. In property values, you must escape special characters :, -, /, and * with the backslash character (\), or enclose the property value in quotes.
  Custom metadata key-value pairs can be modified.
• Hive extended attribute key-value pairs - tp_key:value
  • key is an extended attribute set on a Hive entity. The syntax of the attribute is specific to Hive.
  • value is a single value supported by the entity type.
  Hive extended attribute key-value pairs are read-only and cannot be modified.
• Managed metadata key-value pairs - namespace.key:value
  • namespace is the namespace containing the property. See Defining Properties for Managed Metadata.
  • key is the name of a managed metadata property.
  • value is a single value, a range of values specified as [value1 TO value2], or a set of values separated by spaces. In a value, * is a wildcard. In property values, you must escape special characters :, -, /, and * with the backslash character (\), or enclose the property value in quotes.
  Only the values of managed metadata key-value pairs can be modified.

• S3 key-value pairs - tp_key:value
  • key is the name of user-defined metadata.
  • value is a single value.
  • Only file metadata is extracted; bucket and folder metadata is not extracted.

Example Search Strings

• Entities in the path /user/hive that have not been deleted - +("/user/hive") +(-deleted:true)
• Descriptions that start with the string "Banking" - description:Banking*
• Entities of type MapReduce or entities of type Hive - sourceType:mapreduce sourceType:hive or sourceType:mapreduce OR sourceType:hive
• Entities of type HDFS with size equal to or greater than 1024 MiB or entities of type Impala - (+sourceType:hdfs +size:[1073741824 TO *]) sourceType:impala
• Directories owned by hdfs in the path /user/hdfs/input - +owner:hdfs +type:directory +fileSystemPath:"/user/hdfs/input" or owner:hdfs AND type:directory AND fileSystemPath:"/user/hdfs/input"
• Job started between 20:00 to 21:00 UTC - started:[2013-10-21T20:00:00.000Z TO 2013-10-21T21:00:00.000Z]
• Custom key-value - project-customer1 - up_project:customer1
• Technical key-value - In Hive, specify table properties like this:

  ALTER TABLE table_name SET TBLPROPERTIES ('key1'='value1');

  To search for this property, specify tp_key1:value1.
• Managed key-value with multivalued property - MailAnnotation.emailTo:"dana@example.com" MailAnnotation.emailTo:"lee@example.com"

  Note: When viewing MapReduce jobs in the Cloudera Manager Activities page, the string that appears in a job Name column equates to the originalName property. To specify a MapReduce job name in a search, use the string (sourceType:mapreduce) and (originalName:jobName), where jobName is the value in the job Name column.