# Filtering Queries

The search field above the graph within the **Logs** section empowers you to filter displayed data by entering specific queries, refining your investigations and streamlining the process of finding logs for analysis.

<figure><img src="https://lh7-us.googleusercontent.com/YlGe34oQiptxx8_ZWKfh55BN_NSkGR43jaD_bRWXOv5VcMKePQJDF3Iss7vY5OTTE1OSwncvqkqhcnmIejqgGMeShflG1lROey_3lYnDV1Yw4ndOO9nSiJigSEZUIZTSfZkeDY6UKIwR5Equo8dgEqA" alt=""><figcaption></figcaption></figure>

By submitting a search query within this line, you’ll retrieve all existing records that correspond to the specified parameter/value condition available during the selected [Time Range](https://docs.edgeport.com/product-docs/service-menu/logs/time-range).

Queries should be written in the following format:

```
@{parameter}{logic}{value}
```

Here:

* ***parameter*** - the name of the request attribute you’d like to filter the results with; the full list of available attributes, depending on the event type, can be seen through the tips list that appears upon clicking on the query line:

  <figure><img src="https://lh7-us.googleusercontent.com/rXYl60SKD0XtWTs5u9ih5OvCj2X_V1j5Y1LlVrUv5IC85-0S1c7Rx7vrWGDTjUQNHt6kSfj9RHdC3eBL2EyHiN945pXg4xAAE7ZJdKNU7-KboNneL4wBrBeNfSYy9YK239ouTratU7lpW6Kzj9ZWMmk" alt=""><figcaption></figcaption></figure>

  \
  Also, you can review the possible attributes by revealing the [details](https://docs.edgeport.com/product-docs/service-menu/logs/total-events-section/list-visualization/event-record-details) for any of the record messages within the *Total Events* section when the [List Visualization](https://docs.edgeport.com/product-docs/service-menu/logs/total-events-section/list-visualization) type is selected.<br>
* ***logic*** - one of the following operators:

| Operator | Description                             |
| -------- | --------------------------------------- |
| -:       | not equal to value                      |
| -<=      | exclude equal to and less than value    |
| ->=      | exclude equal to and greater than value |
| -<       | exclude less than value                 |
| ->       | exclude greater than value              |
| :        | equal to specific value                 |
| <=       | equal to or less than value             |
| <        | less than value                         |
| >=       | equal to or greater than value          |
| >        | greater than value                      |

* ***value*** - the attribute value you’d like to filter the results by.

For example, entering ***@client\_country\_code:US*** into the queries line will display requests that came from USA users. And if stating the ***@status\_code:500*** query, you’ll be shown only the requests that ended up with an error.

<figure><img src="https://lh7-us.googleusercontent.com/l1QgNyuMygNo9iXBk-WxRu3LwEqlxZ9SQCQ5HcumCau2CxqhEd9zaeAdTycuRNa8txgy0LpXqR7lY0_wMO7orG_rKLE80W8AyqBimgPZctc4szSVjMMILrGuBs7k6GisX5e8DdWy09BK3TU-f0uwEeA" alt=""><figcaption></figcaption></figure>

You are also able to create more complex filtering queries by combining multiple parameter/value conditions using additional operators:

* **AND** - defines the intersection of conditions, meaning only the requests corresponding to both are shown;
* **OR** - defines the union of both conditions, displaying all requests that correspond to any of the conditions;
* ‘**-**’ - defines excluding all requests corresponding to the stated condition.

{% hint style="info" %}
Additionally, you can quickly apply the required “*equal to*” or “*not equal to*” filters through the [Event Record Details](https://docs.edgeport.com/product-docs/service-menu/logs/total-events-section/list-visualization/event-record-details) frame using the gear next to the required attribute/value pair.
{% endhint %}