Users with the necessary permissions can go to Data Search → Current queries to consult a list of the queries currently running in a domain. This lets you check their priority, CPU consumption, the number of parsed and returned events, and the quantity of parsed bytes. You can also copy a query's LINQ script or cancel a query from running.
Here's a closer look at what you'll see in this view:
Application | Whether the query was run using the Web or API application. |
|---|---|
Domain | Domain where the query is run. |
Created by | The email address of the user that created the query. |
Table name | The name of the data table the query is executed on. |
Started | The time the query was executed. |
From | The start of the date range selected for the query. |
To | The end of the date range selected for the query. |
CPU | The percentage of total CPU capacity used to run the query. Devo uses a color-coding system to reveal the impact of consumption, using the following ranges:
|
Bytes Parsed | The number of bytes processed while running the query. |
Events Parsed | The number of events parsed for the query. |
Events returned | The number of events matching the query after groupings, filters, or any other conditions included in the query. |
Expanding the query details
Click a row to expand the full details of the query, as well as the percentage of the histogram that has been loaded.
To copy a query's LINQ script, select the row of the query. The script is displayed and the copy icon on the right can be used to copy the script to the clipboard. You can also click the ellipsis icon that appears at the end of the row upon hovering and select Show query.
To cancel a query, click the ellipsis icon that appears at the end of the row upon hovering and select Cancel query. Canceling a query stops it from running until it is activated again. When a query has been canceled, it disappears from the list.
Click this icon at the top right corner to refresh the list of queries.
About Data Search
The Query Management area shows dates relating to the query to calculate the histogram and query or queries to get the events shown in the table. For the histogram, if various time ranges have been selected, only the missing interval will be loaded. These missing intervals are due to previous histogram data being discarded when the difference between the time ranges selected is more than three days. If there is a difference of less than three days, the histogram is simply extended without discarding any data.
As well as building the histogram, there are queries to search events. In this case, various queries with time ranges falling within the search interval can be executed, to avoid downloading all of the data and to prevent browser memory exhaustion.