Search window toolbar
Overview
The search window toolbar offers a rich set of tools to work with the table data including grouping, aggregation, data download, and more. Hover over each icon to see its tooltip. These are the default tools displayed in the toolbar:
(1) Time interval history | Apply time intervals previously set in any active queries. Learn more about this in this article. |
---|---|
(2) Field manager | Hide or show fields in the data table to work only with the necessary ones. Check out Hide and show fields to learn how to do it. |
(3) Selected events | This is useful to see and be able to download information for a few selected events instead of the whole table. First, select the rows you want to see or download, by clicking on their rows. Then click the clipboard icon. This allows you to check information about specific events in the data table. Select one or several events in the data table to make this option available. |
(4) Field | Access a set of operations to edit and arrange the table fields. Learn more about these operations in the articles in Modifying the field layout. |
(5) Query code editor | Open a query editor where you can build or modify the current query using the LINQ syntax. Learn more in Query code editor. |
(6) Node tree | Display a treemap representing all the operations applied to the original data table. Learn more in Applied query operations. |
(7) CyberChef | Use this tool to analyze and decode your data before building your query. Learn more in Manipulate your data using CyberChef. |
(8) Alert definition | Define alerts to monitor active queries and receive notifications when certain conditions occur. Check the instructions in Creating new alerts. |
(9) Aggregate | Perform aggregation operations on table data that has been already grouped by time interval. |
(10) Group | Group data to get all the different row value combinations of the grouped fields. |
(11) Filter OR | You can use an OR filter to get records that have any of the values for a given property. |
(12) Filter | Filter data to retrieve certain values or exclude them from the table. |
(13) Create field | Create fields in your data tables transforming the already existing data. |
(14) Download | Download query data in different formats. Go to Download query data for further information. |
(15) Server mode | Check this box to activate server mode in your searches. The default search mode is recommended for small queries, while server mode is recommended for queries that process a large amount of data. Learn more in Best practices for data search. You can set server mode as default in your User preferences. |
(16) Additional tools | Access a set of additional operations that do not appear in the default toolbar. |
(17) Close search | Close the current search. |
You can customize the default toolbar configuration to provide quick access to the tools that you use most frequently. You can perform the following actions to customize your toolbar as needed.
Add new tools to the toolbar and manage them
Select the gear icon on the toolbar (Additional tools) and navigate to the required tool in the list. Hover over its icon and when the cursor changes shape, drag and drop the tool into the table toolbar. The icon will appear as the first tool in the toolbar.
To change the order of the tools, select the tool you want to move and drag it to the new position in the toolbar. To remove an icon from the table toolbar, select, hold and move it to the dynamic trash bin that appears, as seen above.
Save and restore the toolbar configuration
After adding the tools you use the most to the toolbar and move them as required, click the gear icon on the toolbar and select Workspace → Save current Workspace. The custom toolbar will appear the next time you access the search window, no matter the data table you open. Select Workspace→ Reset Workspace to default to restore the original toolbar configuration.