Query management

Users with the necessary permissions can go to Data Search → Query Management to consult a list of the queries currently running in a domain and check their CPU consumption, the number of parsed and returned events, and the quantity of parsed bytes. You can also copy a query's LINQ script or cancel a query from running.

  • To copy a query's LINQ script, select the row of the query. The script is displayed and a copy icon can be used to copy the script to the clipboard. You can also select the ellipsis icon at the end of a row and click Show query.
  • To cancel a query, hover over the last column of a row until the ellipsis icon appears. Click the icon and select Cancel query. Canceling a query stops it from running until it is activated again. When a query has been canceled, it disappears from the list.

Have we answered your question?

If not, please contact our technical support team via email by clicking the button below.

CONTACT US