Search Filter

The Search Filter feature shows results that match the search text for any data element on that screen (as opposed to the global site Search at the top of the navigation pane which searches the entire site). This includes the data shown in each column as well as the Tags associated with the element. So, for example, if you enter the search text “Demo” on the Sources screen, results are shown for Sources that have “Demo” as part of the Source Name, Ingest Cluster, Input etc.

You can use Boolean operators "AND", "OR", and "NOT" and grouping characters "()[]" to create complex search filters.

The operators must be capitalized. When the words "and", "or", and "not" are not capitalized, they are treated as regular search text. Also, the operators must be preceded and followed by a space in order to be recognized as operators.

Column-specific filter options

In addition to the search filter, it is possible to use additive column-specific filter options that are specific to the column types of the correspond table. This allows you to set more fine-grained filter parameters such as searching for text in specific columns, filtering with relational operators on numerical columns, or filtering for specifying time ranges etc.

To create a column-specific filter:

  1. Click Add Filter
    A list of columns is displayed. 
  2. Select the relevant column to apply the filter. 
    The filter configuration is displayed.
     
  3. Select the relevant operator and enter the value. 
    The filter is added. 
  4. Repeat the steps to configure additional filters. Filters are additive, so a sources search with a filter for uptime > 2 days, and a second for uptime < 3 days, will yield a result of all sources with uptimes between 2 and 3 days.