Check currently running queries
Users with the necessary permissions can go to Data Search → Query Management to consult a list of the queries currently running in a domain. This lets you check their priority, CPU consumption, the number of parsed and returned events, and the quantity of parsed bytes. You can also copy a query's LINQ script or cancel a query from running.
- To copy a query's LINQ script, select the row of the query. The script is displayed and the copy icon on the right can be used to copy the script to the clipboard. You can also click the ellipsis icon that appears at the end of the row upon hovering and select Show query.
- To cancel a query, click the ellipsis icon that appears at the end of the row upon hovering and select Cancel query. Canceling a query stops it from running until it is activated again. When a query has been canceled, it disappears from the list.
Click this iconat the top right corner to refresh the list of queries.