Skip to Main Content
Liongard Library

Welcome to Liongard Library, where Lions share! This is a community-led space where Liongard users can come to teach and learn from one another.
Share custom Metrics, get inspired and see what’s trending in the Pride.

Pride Etiquette:
➕ Have great custom Metrics? Add them as entries!
🌟 Want to use a Metric? Copy the query and
follow this doc.
👍 Tried a Metric from the Library? Like it!
📣 Have a question or feedback on a Metric? Add a comment!
🔎 Not sure where to start? Learn about Metrics and how to write them.
💬 Need help writing a metric or want to help support others? Join the conversation in our Liongard Lounge #metrics slack channel.


🥴 See something off? Open a support chat to let us know.

Categories Duo Security
Created by Rashid White
Created on Nov 5, 2021

Duo Security: Bypass Users List

list any users with a bypass status

Query

Users[?status == `bypass`]. username | join(`, `, @)

  • Attach files
  • Bill Krauss (Applied Tech)
    Reply
    |
    Apr 22, 2022

    I created one that will ignore users in bypass if the notes field has "whitelisted" and if they are enrolled so we didn't get alerts for things that we knew were going to happening.

    Users[?status == `bypass` && notes != 'whitelisted' && is_enrolled == 'true']. username | @