Using the workspace
You can use the workspace effectively to track search queries that you run and the various actions that you performed while troubleshooting an issue.
This topic contains the following information:
Viewing the list of search queries
The Workspaces panel lists every search query that is run by using the search bar. The search queries are displayed in descending order, meaning that the most recently run query is listed at the top of the workspace. You can change the display to list search queries depending on which ones were modified most or accessed most. Also, you can change the order from descending to ascending. For more information, see Sorting-and-filtering-search-queries.
Every time you run a search query from the search bar, by default it is listed in the default workspace. You can create a new workspace or open another existing workspace to run search queries for troubleshooting a specific task. For more information, see Creating and switching between workspaces .
Action | Description |
|---|---|
Pin a log entry | Click Pin this result If you pin a log entry in the search results area, then the search query in the workspace is automatically marked with a star ( You can pin multiple log entries to the search query. |
View list of pinned log entries | Click the Right arrow If a search query has pinned log entries, you will see a right arrow next to it. |
View details of an individual pinned log entry | Click Show Details |
next to the log entry, in the search results area.
), and the particular log entry is pinned under the search query.
to expand the search query to show all of the pinned log entries.
next to the particular pinned log entry.Pinned log entry details
Distinguishing search queries of interest
You can perform the following actions to distinguish particular search queries by using the workspace:
Icon | Description |
|---|---|
| Mark search queries with a star to designate them as favorites. To mark search queries as interesting, select them and click Star |
| Save search queries for future reuse or for deeper monitoring purposes. To save a search query, select the desired query, click Save Search For more information, see Managing-saved-searches. |
| Delete irrelevant search queries by selecting them and clicking Delete To delete pinned log entries, select them and click Delete. |
| Record your comments, instructions, or additional information for search queries. To add a note to a search query (or update an existing note), select the desired search query and click Add/Edit notes To add a note for the current workspace (or update an existing note), click Add/Edit notes, add your comments, and click Save. |
Running search queries from the workspace
You can run search queries listed in the workspace for the original time context or the relative time context. If you run a search query for the original time context, the search results are displayed for the same period as the original time. If you run a search query for the relative time context, the search query is run for the current period but for the same time context as that of the original search query.
For example, you can run the search query for the last 7 days as of September 1, 2014. If you run the search query for the original time context, you can see the same search results that were available as on September 1, 2014. But if you run the search query for the relative time context, as of October 1, 2014, you can see search results for the last 7 days from October 1, 2014.
- To run a search query for the original time context, point to the desired search query and click Run.
- To run a search query for the relative time context, point to the desired search query, click the down arrow next to Run, and select Relative time.