Check currently running queries
Users with the necessary permissions can go to Data Search → Query Management to consult a list of the queries currently running in a domain. This lets you check their priority, CPU consumption, the number of parsed and returned events, and the quantity of parsed bytes. You can also copy a query's LINQ script or cancel a query from running.
- To copy a query's LINQ script, select the row of the query. The script is displayed and a copy icon can be used to copy the script to the clipboard. You can also select the ellipsis icon at the end of a row and click Show query.
- To cancel a query, hover over the last column of a row until the ellipsis icon appears. Click the icon and select Cancel query. Canceling a query stops it from running until it is activated again. When a query has been canceled, it disappears from the list.