Document toolboxDocument toolbox

Search window toolbar

Overview

The search window toolbar offers a rich set of tools to work with the table data including grouping, aggregation, data download, and more. Hover over each icon to see its tooltip. These are the default tools displayed in the toolbar:

(1) Time interval history

Apply time intervals previously set in any active queries. Learn more about this in this article.

(2) Field manager

Hide or show fields in the data table to work only with the necessary ones. Check out Hide and show fields to learn how to do it.

(3) Selected events

This is useful to see and be able to download information for a few selected events instead of the whole table.

First, select the rows you want to see or download, by clicking on their rows. Then click the clipboard icon. This allows you to check information about specific events in the data table. Select one or several events in the data table to make this option available. Learn more in Data table.

(4) Field options

Access a set of operations to edit and arrange the table fields. Learn more about these operations in the articles in Modifying the field layout.

(5) Query code editor

Open a query editor where you can build or modify the current query using the LINQ syntax. Learn more in Query code editor.

(6) Node tree

Display a treemap representing all the operations applied to the original data table. Learn more in Applied query operations.

(7) CyberChef

Use this tool to analyze and decode your data before building your query. Learn more in Manipulate your data using CyberChef.

(8) Alert definition

Define alerts to monitor active queries and receive notifications when certain conditions occur. Check the instructions in Creating new alerts.

(9) Aggregate

Perform aggregation operations on table data that has been already grouped by time interval.

(10) Group

Group data to get all the different row value combinations of the grouped fields.

(11) Filter OR

You can use an OR filter to get records that have any of the values for a given property.

(12) Filter

Filter data to retrieve certain values or exclude them from the table.

(13) Create field

Create fields in your data tables transforming the already existing data.

(14) Download data

Download query data in different formats. Go to Download query data for further information.

(15) Server mode

Check this box to activate server mode in your searches. The default search mode is recommended for small queries, while server mode is recommended for queries that process a large amount of data. Learn more in Best practices for data search. You can set server mode as default in your User preferences.

(16) Close search

Close the current search.

(17) Additional tools

Access a set of additional operations that do not appear in the default toolbar.

You can customize the default toolbar configuration to provide quick access to the tools that you use most frequently. You can perform the following actions to customize your toolbar as needed.

Add new tools to the toolbar and manage them

Select the options menu in the toolbar and navigate to the required tool in the list. Hover over its icon and when the cursor changes shape, drag and drop the tool into the table toolbar. The icon will appear as the first tool in the toolbar.

To change the order of the tools, select the tool you want to move and drag it to the new position in the toolbar. To remove an icon from the table toolbar, select, hold and move it to the dynamic trash bin that appears, as seen above.

Save and restore the toolbar configuration

After adding the tools you use the most to the toolbar and move them as required, click the options menu in the toolbar and select Workspace → Save current Workspace. The custom toolbar will appear the next time you access the search window, no matter the data table you open. Select Workspace→ Reset Workspace to default to restore the original toolbar configuration.