Query management

Users with the necessary permissions can go to Data Search → Query Management to consult a list of the queries currently running in a domain and check their CPU consumption, the number of parsed and returned events, and the quantity of parsed bytes. You can also copy a query's LINQ script or cancel a query from running.

  • To copy a query's LINQ script, select the row of the query. The script is displayed and a copy icon can be used to copy the script to the clipboard. You can also select the ellipsis icon at the end of a row and click Show query.
  • To cancel a query, hover over the last column of a row until the ellipsis icon appears. Click the icon and select Cancel query. Canceling a query stops it from running until it is activated again. When a query has been canceled, it disappears from the list.

Have we answered your question?

If not, please contact our technical support team via email by clicking the button below.