Document toolboxDocument toolbox

Check currently running queries

Users with the necessary permissions can go to Data Search → Query Management to consult a list of the queries currently running in a domain. This lets you check their priority, CPU consumption, the number of parsed and returned events, and the quantity of parsed bytes. You can also copy a query's LINQ script or cancel a query from running.

Here's a closer look at what you'll see in this view:

Application

Whether the query was run using the Web or API application.

Created By

The email address of the user that created the query.

Table Name

The name of the data table the query is executed on.

Started

The time the query was executed.

From

The start of the date range selected for the query.

To

The end of the date range selected for the query.

CPU

The percentage of total CPU capacity used to run the query. Devo uses a color-coding system to reveal the impact of consumption, using the following ranges:

  • 0-10 green

  • 10-30 amber

  • 30+ red

Bytes Parsed

The number of bytes processed while running the query.

Events Parsed

The number of events parsed for the query.

Events returned

The number of events matching the query after groupings, filters, or any other conditions included in the query.

Expanding the query details

Click a row to expand the full details of the query, as well as the percentage of the histogram that has been loaded.

Related to Data Search, the Query Management area shows dates relating to the query to calculate the histogram and query or queries to get the events shown in the table. For the histogram, if various time ranges have been selected, only the missing interval will be loaded. These missing intervals are due to previous histogram data being discarded when the difference between the time ranges selected is more than three days. If there is a difference of less than three days, the histogram is simply extended without discarding any data.


As well as building the histogram, there are queries to search events. In this case, various queries with time ranges falling within the search interval can be executed, to avoid downloading all of the data and to prevent browser memory exhaustion.

  • To copy a query's LINQ script, select the row of the query. The script is displayed and the copy icon on the right can be used to copy the script to the clipboard. You can also click the ellipsis icon that appears at the end of the row upon hovering and select Show query.

  • To cancel a query, click the ellipsis icon that appears at the end of the row upon hovering and select Cancel query. Canceling a query stops it from running until it is activated again. When a query has been canceled, it disappears from the list.

Click this icon  at the top right corner to refresh the list of queries.