Create Basic Analytics Searches

This page describes UI elements available in the Analytics search panels and focuses on how to create searches in Basic mode. This mode is also called Drag and Drop Search in the UI and enables you to do multi-widget visualization of your search results. In this mode, you add search criteria based on the fields collected for the event type. Field search enables you to search for all values or a specific value of the field.

UI Elements

These UI elements are available to help construct your searches:

New Search: The scope of the search depends on the Fields type. You can filter your search with the + Add Criteria button.
Field value dropdown: After you have selected a field, use the dropdown to add a list of values.
Combination field selector and search: This field value selector combines a list of values with the ability to search for terms in the values list. It also has an Advanced Filter option.
Text filter: Enables you to do an exact match on the term entered. Supports wild cards. See Search Options.

Basic Search

To create a search using a field:

From the Analytics Search list, click + Add.
To use basic mode and multi-widget visualizations, select Drag and Drop Search.

To use advanced mode (ADQL) and single-widget visualizations, see Create Advanced Analytics Searches.
On the Transactions tab, select the data source type that you want to search.
To add filters to your search, click + Add Criteria.
The field selector dropdown appears, so you can select the field you want to use.
Select a field. The field name appears in the search criteria line.
Click the dropdown next to the field name to open the field value selector. Select a value for the field.
Fields such as application, business transaction, and node display a list of the values available. Some fields show a search box where you can enter criteria to filter the values of this field.

Search Options

This tables describes free text search and text filter behavior:

Type of entry	Analyzed	Non-analyzed
term	Find entries with this term. This search is case insensitive. For example, using the term "great" finds "great" and "AppDynamics is great".	Looks for an exact match and is case sensitive. For example, using the term "order" finds "order" but not "/PlaceOrder.
term1 term2	Returns results containing both term1 and term2 irrespective of the order the terms appear.	Terms are implicitly AND'd. Looks for an exact match and find results containing "term1 term2".
term1, term2	This works the same as the space-separated list of terms.	Terms are implicitly OR'd. Looks for an exact match for either term1 or term2.
term* term?	Finds all fields where the value is this string plus one additional character <?> or multiple <*>. Because all non-alphanumeric fields are delimiters, the escape character has no effect.	Finds all fields where the value is this string plus one additional character <?> or multiple <*>. To search for a field containing a wild card character, escape with a "\".
NOT term	Use the NOT comparison operator to find everything except the term. NOT can be used with any of the entries in this table.	Use the NOT comparison operator to find everything except the term. NOT can be used with any of the entries in this table.

Free Text Search in Log Analytics

For log analytics, a free text search is available for searching the message field. This enables you to search for any keyword or string anywhere in the message field.