In the Investigation > Navigate view or Events view, you can create a query rather than clicking through the meta keys and values to drill down into the meta data. The dialogs for creating a query offer syntax help with drop-down lists of applicable meta keys and operators. Related procedures are available in Query Data in Navigate View.
To access this dialog:
- In the Security Analytics menu, select Investigation > Navigate or Events. Both views provide access to the Query dialog.
The Investigate dialog is displayed.
- Select a service, then click Navigate.
- In the toolbar, select Query.
The Query dialog is displayed.
The Query dialog has three views:
In the Simple view, you can create a query using the options displayed in the dialog. In the Advanced view, you can create a query without guidance. In the Recent view, you can select a query from a drop-down list of recent queries.
The following table describes of theQuery dialogs.