Spaces
Teams
Apps
Templates
Create
Devo latest
All content
Space settings
Content
Results will update as you type.
Quick reference guide
Devo Platform
Getting started
Domain administration
Sending data to Devo
Devo parsers
Searching data
Accessing data tables
Building a query
•
Data types in Devo
Build a query in the search window
Build a query using LINQ
•
Working with JSON objects in data tables
•
Subqueries
Operations reference
Aggregation operations
Calculation group
Codification group
Conversion group
Detection group
•
And (and)
•
At (at)
•
At (at0)
•
At (at1)
•
At (atend)
•
Conditional (ifthenelse)
•
Contains (has, ->)
•
Contains - case insensitive (weakhas)
•
Contains tokens (toktains)
•
Contains tokens - case insensitive (weaktoktains)
•
Decode, switch (decode)
•
Drop nulls (dropnulls)
•
Edit distance: Damerau (damerau)
•
Edit distance: Hamming (hamming)
•
Edit distance: Levenshtein (levenshtein)
•
Edit distance: OSA (osa)
•
Ends with (endswith)
•
Equal (eq, =)
•
Equal - case insensitive (eqic)
•
Greater or equal (ge, >=)
•
Greater than (gt, >)
•
Index of (indexof)
•
Is empty (isempty)
•
Is in (`in`, <-)
•
Is in - case insensitive (weakin)
•
Is not null (isnotnull)
•
Is null (isnull)
•
Keys (keys)
•
Length (length)
•
Less or equal (le, <=)
•
Less than (lt, <)
•
Locate (locate)
•
Matches (matches, ~)
•
Not (not)
•
Not equal (ne, /=)
•
Null value locator (nvl)
•
Or (or)
•
Peek (peek)
•
Sort (sort)
•
Values (values)
Extraction group
Geolocation group
JSON group
Packet group
Time group
Web connection group
Working in the search window
Managing your searches
Managing your queries
•
Best practices for data search
Monitoring tables
Activeboards
Alerts and notifications
Applications
Tools
Exchange
Flow
API reference
Devo DeepTrace
Devo SOAR
Devo integrations
Release notes
Blogs
Apps
Scroll Documents
Devo latest
/
/
Operations reference
/
Detection group
Summarize
Document toolbox
Detection group
Sarah Bigault (Deactivated)
Owned by
Sarah Bigault (Deactivated)
Last updated:
Dec 18, 2023
1 min read
Loading data...
{"serverDuration": 14, "requestCorrelationId": "416b534d8c3742f796e6fc26c9238408"}
Sarah Bigault (Deactivated)