...
You can filter your data in several different ways:
Using the Operations over columns window
You can use this window to specify the arguments needed for the operation following the procedure explained below:
Rw ui steps macro | ||||
---|---|---|---|---|
Select the Filter icon in the search window toolbar. The Operations over columns window appears with the Filter tab selected.
Choose the required filter type in the Operation dropdown list. For a detailed list of available operations in Devo, check Operations reference. You can click the icon next to the dropdown menu to filter the list of operations as required:
Select the Arguments of the selected filter operation by clicking the Add argument button. Depending on the filter type selected, you will be prompted to select a set of specific arguments. You can select columns or also enter free text by clicking the icon shown below, as is sometimes required for an operation. For example, you might filter for URLs that contain the string bing. Additionally, you can include nested operations to modify the results of the column values or results of the main filter operation selected. Learn more about nested operations in Build a query in the search window.
Click Filter when you're done. The data table will only show those events that meet the conditions of the filter applied. |
Using the column header list of values
Select the arrow icon that appears when hovering over a column header to see the list of distinct values in that column, then click a value name. The Operations over columns window will be open in the Filter tab, and the Equal - case insensitive (eqic) operation selected. The column and value selected will be automatically added as arguments of the filter.
...
Rw ui textbox macro | ||
---|---|---|
| ||
This filter option is not available for unnamed columns with literals or expressions. See the examples below:
|
Using cell value
Alternatively, you can use a cell's content as filtering criteria to quickly include all the arguments needed for the operation. If you place the cursor over a cell on the data table and press
Status | ||||
---|---|---|---|---|
|
...
Using cell value to filter in a new tab
Expand | ||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|
| ||||||||||||
|
...