...
Table view - The default view, where event fields are split into different fields. Learn more
List view - In this view, each event is displayed in a single row as a list of keys and values. Learn more
...
There are several operations common to both views:
...
To learn more about each option, go to the related content:
...
In this view, the event fields are no longer shown as fields. Rather, event information is displayed in a single row as a list of keys and values, called pills. This way, you can view the entire event and all its fields on screen in one click.
This view consists of two fields: the first one is the eventdate or creation date, and the second lists all pillskey-value pairs.
Extra fields, such as raw, will show in orange.
...
Show field names | Toggling off removes the field names, leaving just the data type and field value. This option is activated by default.   |
|---|---|
Show data types | Toggling off removes the data type pill, leaving the field name and value. This option is activated by default.   |
Show null values | Toggle off to remove null values.   |
| Anchor | ||||
|---|---|---|---|---|
|
...
values
The list view allows you to copy individual values within an event using the pills explained previouslykey-value pairs. Using the standard ctrl + c and ctrl + v will copy the field name and value.
Alternatively, you can choose which fields to copy by right-clicking > Copy and choosing between the available options:
Copy name: includes the entire key-value pair
Copy only:
Name: includes only the name field.
Value: includes only the value field.
Copy pill: includes all values contained within a pill.
...
| Info |
|---|
When only part of the text is selected, copying using right-click or keystrokes applies to the selected part only, whereas filtering, drill downs and pretty print apply to the entire value. |