Check currently running queries

[ 1 Overview ] [ 2 What permissions do I need? ] [ 3 Exploring queries ] [ 4 Expanding query details ] [ 5 Closing a query ]

Overview

Users with the necessary permissions can go to Data Search → Current queries to consult a list of the queries currently running in a domain. This lets you check their priority, CPU consumption, the number of parsed and returned events, and the quantity of parsed bytes. You can also copy a query's LINQ script or cancel a query from running.

About Data Search

The Current queries area shows dates relating to the query to calculate the histogram and query or queries to get the events shown in the table. For the histogram, if various time ranges have been selected, only the missing interval will be loaded. These missing intervals are due to previous histogram data being discarded when the difference between the time ranges selected is more than three days. If there is a difference of less than three days, the histogram is simply extended without discarding any data.

As well as building the histogram, there are queries to search events. In this case, various queries with time ranges falling within the search interval can be executed, to avoid downloading all of the data and to prevent browser memory exhaustion.

What permissions do I need?

To access this area and stop queries when needed, you need the Manage level of the Query management permission. With the View level you can only check their details. Take into account that you need to activate any level of the parent permission (Finders) to enable the permission checkbox (know more about permissions here).

Exploring queries

You will see a list of the queries that are currently running. Click the refresh icon at the top right corner to update the list of queries. Here's a closer look at what you'll see in this view:

Application	Whether the query was run using the Web or API application.
Domain	Domain where the query is run.
Created by	The email address of the user that created the query.
Table name	The name of the data table the query is executed on.
Started	The time the query was executed.
From	The start of the date range selected for the query.
To	The end of the date range selected for the query.
CPU	The percentage of total CPU capacity used to run the query. Devo uses a color-coding system to reveal the impact of consumption, using the following ranges: 0-10 green 10-30 amber 30+ red
Bytes Parsed	The number of bytes processed while running the query.
Events Parsed	The number of events parsed for the query.
Events returned	The number of events matching the query after groupings, filters, or any other conditions included in the query.

Expanding query details

Click a row to expand the full details of the query, as well as the percentage of the histogram that has been loaded. You can also click the ellipsis icon at the end of the row and select Show query.

You can copy a query’s LINQ script to the clipboard by clicking the copy icon at the bottom right of the code box.

Closing a query

To cancel a query, click the ellipsis icon at the end of the row and select Close query. Closing a query stops it from running until it is activated again. When a query has been closed, it disappears from the list.