Spaces
Teams
Apps
Templates
Create
Devo latest
All content
Space settings
Content
Results will update as you type.
Quick reference guide
Devo Platform
Getting started
Domain administration
Sending data to Devo
Devo parsers
Searching data
Accessing data tables
Building a query
Data types in Devo
Build a query in the search window
Build a query using LINQ
•
Working with JSON objects in data tables
•
Subqueries
Operations reference
Aggregation operations
Calculation group
Codification group
Conversion group
Detection group
•
And (and)
•
At (at)
•
At (at0)
•
At (at1)
•
At (atend)
•
Conditional (ifthenelse)
•
Contains (has, ->)
•
Contains - case insensitive (weakhas)
•
Contains tokens (toktains)
•
Contains tokens - case insensitive (weaktoktains)
•
Decode, switch (decode)
•
Drop nulls (dropnulls)
•
Edit distance: Damerau (damerau)
•
Edit distance: Hamming (hamming)
•
Edit distance: Levenshtein (levenshtein)
•
Edit distance: OSA (osa)
•
Ends with (endswith)
•
Equal (eq, =)
•
Equal - case insensitive (eqic)
•
Greater or equal (ge, >=)
•
Greater than (gt, >)
•
Index of (indexof)
•
Is empty (isempty)
•
Is in (`in`, <-)
•
Is in - case insensitive (weakin)
•
Is not null (isnotnull)
•
Is null (isnull)
•
Keys (keys)
•
Length (length)
•
Less or equal (le, <=)
•
Less than (lt, <)
•
Locate (locate)
•
Matches (matches, ~)
•
Not (not)
•
Not equal (ne, /=)
•
Null value locator (nvl)
•
Or (or)
•
Peek (peek)
•
Sort (sort)
•
Values (values)
Extraction group
Geolocation group
JSON group
Lookup operations
Packet group
Time group
Web connection group
Working in the search window
Managing your searches
Managing your queries
•
Best practices for data search
Monitoring tables
Activeboards
Alerts and notifications
Applications
Tools
Exchange
Flow
API Reference
Devo DeepTrace
Devo SOAR
Devo integrations
Release notes
Blogs
Apps
Scroll Documents
Postman Doc
Links
Devo latest
/
/
Operations reference
/
Detection group
Summarize
Document toolbox
Detection group
Former user (Deleted)
Owned by
Former user (Deleted)
Last updated:
Dec 18, 2023
Loading data...
{"serverDuration": 13, "requestCorrelationId": "88c5c7c247994d62891171f76d1bdbf3"}