Search tab

List of all data collectors that recently polled data (successfully) for search (maximum 10).

Click one of the items in the list to run a search query that shows results originating from that data collector.

Displays a graph that plots a line chart showing the sum of all the records indexed along with the total volume of data (sum of bytes) indexed in the last week.

This graph gives you a high level understanding about the amount of data indexed by the product. It also indicates the kind of data load that the product is handling.

Example: If you see a sudden dip in the record count on a particular day, it might indicate that some data collectors or the Collection Stations (or Collection Agents) are not working.

In this graph, the following apply:

• X axis represents the date and time for the last seven days.
• Y axis on the left, represents sum of records indexed per day.
• Y axis on the right, represents the total volume of data (sum of bytes) indexed per day.

For more information, see Monitoring the product metric files.

The number of recently created workspaces (maximum of 10).

Click one of the items displayed to switch between workspaces.

List of recently created notifications (maximum of 10).

Click one of the items to edit that notification.

Can be used to specify your search criterion.

You can also click Pause Search  or Cancel Search next to the search bar, to pause or cancel a search that is taking too long to complete.

You can click Save Search next to the Search bar to save the search query. You can use the resulting saved search to use it for monitoring the results obtained by running the search query. This can be done by adding views or notifications on the basis of the saved search.

Searching the data

Displays a list of fields and tags to add to your search criteria.

Displays a a list of indexed data, depending on your search criteria.

You can view your search results as optimized, minimal, expanded minimal, or detailed.

You can switch between the Text View  that displays the data in the search results and the Chart View  that summarizes your search results as a chart. By default, a maximum of 100 results are displayed on one page. You can change this setting by changing the page size; navigate to Settings > User Settings.

You can click Export Search Results to export the search results for later viewing. You can change the maximum number of results to export, by navigating to Administration > System Settings.

Displays the active session in which you are operating. The active session displays a list of recent search queries that you can run. You can save particular search queries and add notes to them, share them, and mark them as favorites by clicking the star icon (). You can also share a workspace.