Introduction
Index Search
is primarily used to apply settings, filtering and conditions on the dataset. This setting is used in Drillthrough and Spreadsheet.This option allows you to perform FIXED complex drillthrough queries via the Elasticsearch DSL Query String Query
Drillthrough
Index search in Drillthrough allows users to make complex queries to a Fact Query via the use of the Elastic Search Query (DSL Query String) feature.
Click here for details about the Elasticsearch query syntax.
You can also see the example query term when clicking on the help icon like the screenshot shows.
Below is the overall description screenshot. Now let us go step by step to configure it.
Choose indexgroup, one or multiple factqueries and time range in the dropdown, and enter your query string to run the query.
It will show the raw query result in the drillthrough grid.
- Select an Index Group and any corresponding Factquery (or ) name to view data from the .
2. We can also select multiple Factqueries in order to query from them. The result of selecting multiple Factqueries will be a union of the data in both the Factqueries in the Drillthrough. However, if both the Factqueries have different schema then the data of the other will show up blank.
3. User can then filter by a selected date with various date options. Please note that the Default date option corresponds to the Date specified in Global settings. It may not work if your fact query doesn't have the same Date as the Default Date in Global settings.
4. The DrillThrough has a helper dialog which can help you build complex queries which can be accessed with the help of the Grid icon on the bottom right hand side of the Indexsearch Configuration Dialog. With this dialog users can generate a query sent to Elastic search to further drill down their searches.
The corresponding query for the above selected options will look like the one below:
Users can also modify their queries to get the appropriate result. For e.g. instead of an OR clause can be used in case of an AND clause below.
Please note that a wrong query may result in an incorrect or no results in the DrillThrough.
Also dates need to be input in a standard format of yyyy-MM-ddThh:mm:ss (the same format with which dates are stored in ElasticSearch) for the Query String search to work properly otherwise the DrillThrough will return an incorrect result. Below is an example of a date search. This does also mean that if eMite is set in a timezone other than UTC the Date search has a higher chances of failing.