Submit a ticketCall us

Have You Auto Renewed? If not, you're missing out.
The SolarWinds Renewal Program comes with a host of benefits including the most recent product updates, 24/7 technical support, virtual instructor-led training and more. Experience all of this with the convenience of Auto Renewal, and never worry about missing any of these great benefits. Learn More.

Home > Success Center > Archive > 2017October30 - LEM Deletes > Using search builder

Using search builder

Created by Caroline Juszczak, last modified by Kevin.Swinson on Oct 30, 2017

Views: 20 Votes: 0 Revisions: 5

Search Builder searches your events using predefined elements you select from the nDepth list pane, such as events, groups, profiles, managers and contents. You can create the search by selecting and dragging the elements into the Conditions box. Additionally, you can group group search items, display boolean AND/OR relationships between search items, select specific values for search items, and select the appropriate operators for specific values.

In this example, WebTrafficAudit was dragged from the Event Name drop-down list into the Conditions box.

For nDepth searches, you can only use the Refine Fields and Managers lists.

File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/060/010/0B0/SearchBuilder2_568x291.png

Open Search Builder

  1. Click Explore > nDepth.
  2. Click the Search Builder File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/060/010/0B0/Icon-SearchBuilder_16x13.png icon in the nDepth toolbar.

Features

This section describes the main features of Search Builder.

File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/060/010/0B0/SearchBuilder-Callouts_487x402.png

The following table describes the Search Builder features.

Item

Name

Description

1

Undo

Redo

Click File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/060/010/0B0/Icon-undo_18x13.png to undo your last action. You can undo up to 50 steps.

Click File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/060/010/0B0/Icon-redo_19x13.png to redo the last action. You can redo up to 50 steps.

2

Search bar

Displays the current search parameters.

If the search bar is in Drag and Drop mode, it displays your configuration search parameters, which match the parameters in the Conditions box. If the search bar is in Text Input mode, the search bar displays the current search parameter as a search string.

??

3

List pane

Contains categorized lists of events, event groups, event variables, groups, profiles, and constants you can use to creating conditions for your filters. For nDepth searches, you can only use the Refine Fields and Managers lists.

The Refine Fields list summarizes all of the primary event details from your search results. The Managers list includes each manager and appliance that can be used with nDepth for searching data.

4

Histogram pane

Investigates a specific time interval. Drag the left and right borders to increase or decrease the search time line.

5

File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/060/010/0B0/Icon-Search.png

Executes the search.

6

Conditions box

Defines the conditions for the data reported by the filter. Configure conditions by dragging items from the list pane into the Conditions box.

??

7

File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/060/010/0B0/Button-AddGroup.png

Adds a new group within the group box. A group within a group is a nested group.

Each group is subject to AND and OR relationships with the groups around it and within it. By default, new groups appear with AND comparisons.

8

File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/060/010/0B0/Button-DeleteGroup.png

Deletes a condition, group, and any groups nested within the group.

9

Group

Individual groups (and the entire Conditions box) can be expanded or collapsed to show or hide their settings:

  • Click to >expand a collapsed group.
  • Click to ??? collapse an expanded group. The number that appears in parentheses indicates how many conditions are contained in the group.

Once a group is properly configured, you may want to collapse it to avoid accidentally changing it.

10

File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/060/010/0B0/Operator-And.png AND

File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/060/010/0B0/Operator-Or.png OR

Boolean operators that define the relationships between your search conditions. Click the operator icon to toggle between AND??and OR conditions.

Configure a search with Search Builder

  1. Click Search Builder in the nDepth toolbar.

    A Conditions box appears.

  2. In the list pane, locate a search item.

    For nDepth searches, you can only use the Refine Fields and Managers lists.

  3. Double-click the item or drag the item into the Conditions box.

    File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/060/010/0B0/select-conditions.png

    By default, the Conditions box includes a "this item exists" condition. To use it, type or paste the search string you want to search for into the text box. Or you can replace this condition by dragging an item from the list pane on top of it.

  4. If the list item contains a variable field (such as a field for an IP address, a constant value, or an empty text box), enter the specific value you want to search for.

    Search Builder validates the configuration.

    If a condition field is yellow, the search configuration is invalid.

    File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/060/010/0B0/SearchBuilderInvalid-Orange.png

    If a condition field is red, the condition does not apply to your data search.

    File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/060/010/0B0/SearchBuilderInvalid-Red.png

  5. (Optional)??Click File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/060/010/0B0/Button-AddGroup.png to create new groups.
  6. Repeat steps 2 through 4, dragging new items into the appropriate group boxes as needed.
  7. Click the Time drop-down menu in the nDepth toolbar and select a time line.

    File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/060/010/0B0/select_timeline.png

  8. Select AND File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/060/010/0B0/Operator-And_8x14.png or OR??File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/060/010/0B0/Operator-Or_9x15.png for your boolean search operator.

    File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/060/010/0B0/select-and-or_332x115.png

  9. Click File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/060/010/0B0/Icon-Search_17x14.png to execute your search.

    Click File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/060/010/0B0/Icon-StopQuery-X_18x14.png to stop a search in progress.

  10. View your results.

    You can:

    • Select an option from the nDepth explorer toolbar to view a graphical version of the search results.
    • Open the Refine Fields list to see a categorized summary of the search data.
    • Open the Result Details view to examine and explore the actual data.
 
Last modified

Tags

Classifications

Public