Data table

In the data table, each row represents an event and each field represents a data value correctly recognized by Devo. If the data is not separated by several fields or is shown in the unknown tag structure of the search view, it is normally due to missing or incorrect tags. Learn more about tags in this article. The data displayed in the table will change according to the operations you apply to build your query (filters, new fields...). Learn more about building queries here.

Data table shortcuts

You can perform the following actions in the data table:

Shortcut	Action
Select a row + SPACE BAR	Click one or several rows to select them and hit the space bar to open the Selected events window, where you can see the event(s) content in detail. You can copy the content to your clipboard or download it in several formats (csv, txt or json) using the controls in the top right corner. You can also select the required event(s) and click the Selected events icon in the search window toolbar to open the Selected events window.
Hover over a cell + ENTER	You can hover over a value in your table and hit the ENTER key to apply a filter and get only events with that specific value in that field. The Operations over fields window will be open in the Filter tab, and the Equal (eq, =) operation selected.
Hover over a cell + P	Hover over any cell in your data table and click P on your keyboard to open a window displaying the cell's contents. You can copy the whole cell content using the Copy to clipboard button. For JSON content, this is especially useful. If the content of the cell is of json data type, the window displays it in a reader-friendly way: name/value pairs are shown on separate lines and values are color-coded by data type. Learn more about this in Working with JSON objects in data tables.
Hover over a cell + C	Use this shortcut to add cell values as input data in the CyberChef tool. Select the CyberChef icon in the toolbar to see the cells added. Learn more in Manipulate your data using CyberChef.