| Table of Contents | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
About the data table
In the data table, each row represents an event and each field represents a data value correctly recognized by Devo. If the data is not separated by in several fields or is shown in the unknown tag structure of the search view, it is normally due to missing or incorrect tags. Learn more about tags in this article.
The data displayed in the table will change according to the operations you apply to build your query (filters, new fields...). Learn more about building queries here.
...
You can perform the following actions in the data table:
...
Shortcut
...
Action
...
Select a row + SPACE BAR
...
Data table shortcuts
| Table of Contents | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
| |||||||||||||
  | Access data table through free text queryWhen you are writing your query in the Free text query section (Data search → Explore your data → Free text query), use this shortcut to launch the query and open the corresponding data table (more info here). Equivalent run buttonYou can also click the Run query button to launch the query and open the corresponding data table. Hovering over the Run button will reveal a tooltip with the shortcuts. | ||||||||||||
| |||||||||||||
   | Open event detailsClick one row to select an event and use this shortcut to open the Selected events window. Hold
Equivalent toolbar buttonYou can also select the required event(s) and click the Selected events icon in the search window toolbar to open theSelected events window. | ||||||||||||
| |||||||||
  | Filter data using a cell’s valueYou can | ||||||||
click a value in your table to select it and hit the |
The Operations over fields window will be open in the Filter tab, |
the Equal (eq, =) operation selected |
Hover over a cell + P
, and the arguments automatically selected. You only need to click Filter to apply it. Equivalent toolbar buttonYou can also click the Filter button on the toolbar, however, you need to manually select operation and arguments. | |||||||||
| |||||||||
   | Open cell details (any data type)Select a cell in your data table and | ||||||||
hit the
|
content is significantly long and cannot fit within the cell, even after resizing. You can copy the whole cell content using the Copy to clipboard button. Open cell details (JSON data type)When the cell contains data in JSON format, this window becomes particularly useful, as it displays content in a reader-friendly way |
. Field/value pairs are shown on separate lines and values are color-coded by data type. Learn more about this in Working with JSON objects in data tables |
. Equivalent right-click optionYou can also right-click the cell in question and select Pretty print to open the selected cell window. | |||||||||
| |||||||||
  | Adding input to Cyber ChefUse this shortcut to add cell values as input data in the CyberChef tool. Select the CyberChef icon in the toolbar to see the cells added. Learn more in Manipulate your data using CyberChef. | ||||||||
Equivalent writing methodTo insert values as input, simply open CyberChef, click on the input field, and write the desired input. |