Filtering Queries

The search field above the graph within the Logs section empowers you to filter displayed data by entering specific queries, refining your investigations and streamlining the process of finding logs for analysis.

By submitting a search query within this line, you’ll retrieve all existing records that correspond to the specified parameter/value condition available during the selected Time Range.

Queries should be written in the following format:

@{parameter}{logic}{value}

Here:

• parameter - the name of the request attribute you’d like to filter the results with; the full list of available attributes, depending on the event type, can be seen through the tips list that appears upon clicking on the query line:

  

  Also, you can review the possible attributes by revealing the details for any of the record messages within the Total Events section when the List Visualization type is selected.
• logic - one of the following operators:

Operator	Description
-:	not equal to value
-<=	exclude equal to and less than value
->=	exclude equal to and greater than value
-<	exclude less than value
->	exclude greater than value
:	equal to specific value
<=	equal to or less than value
<	less than value
>=	equal to or greater than value
>	greater than value

• value - the attribute value you’d like to filter the results by.

For example, entering @client_country_code:US into the queries line will display requests that came from USA users. And if stating the @status_code:500 query, you’ll be shown only the requests that ended up with an error.

You are also able to create more complex filtering queries by combining multiple parameter/value conditions using additional operators:

• AND - defines the intersection of conditions, meaning only the requests corresponding to both are shown;

• OR - defines the union of both conditions, displaying all requests that correspond to any of the conditions;

• ‘-’ - defines excluding all requests corresponding to the stated condition.

Additionally, you can quickly apply the required “equal to” or “not equal to” filters through the Event Record Details frame using the gear next to the required attribute/value pair.