This topic describes UI elements available in the Analytics search screens and focuses on how to create searches in Basic mode. This mode is also called Drag and Drop Search in the UI and enables you to do multi-widget visualization of your search results. In this mode, you add search criteria based on the fields collected for the event type. Field search enables you to search for all values or a specific value of the field. 

UI Elements

The following UI elements are available to help construct your searches:

  • Query bar: consists of the event type selector and the Add Criteria button.

    Click the down arrow to see the drop-down list for the available event types. Click Add Criteria to see the available fields for the selected event type.
  • Search box: The scope of the search depends on the context. For example, you can search for a field in the field list to locate a specific field:

    For some fields, such as business transaction, you can enter a term to narrow the list to values containing that term:
     

    Hover over a specific numeric field to view basic statistics associated with the field:
     
  • Field value selector: After you have selected a field, you may see a drop-down that shows a list of values for that field. For example: 
     
  • Text filter: Enables you to do an exact match on the term entered. Supports wild cards. For other options, see Search Options.

  • Combination field selector and search: This field value selector combines a list of values with the ability to search for terms in the values list. It also has an "Advanced" option that displays the text filter instead.

    Clicking in the text box reveals the list of values.

    Clicking Advanced Filter and the down arrow again displays a text filter:
     

Basic Search

To create a search using a field:

  1. From the Analytics Search list, click + Add.
  2. To use basic mode and multi-widget visualizations, select Drag and Drop Search.

    To use advanced mode (ADQL) and single-widget visualizations, see Create Advanced Analytics Searches for details.
  3. On the Data tab, select the data source you want to search.
     
  4. To add filters to your search, click +Add Criteria.
    The field selector drop-down appears, so you can select the field you want to use.
  5. Select a field. The field name appears in the search criteria line.
  6. Click the drop-down next to the field name to open the field value selector. Select a value for the field. 

    Fields such as application, business transaction, and node display a list of the values available. Some fields show a search box where you can enter criteria to filter the values of this field.

    When you search Analytics data, the values shown for segment fields are from the originating tier segment. Data from downstream (non-originating) tier segments is not shown. To visualize downstream segment data, double-click on the transaction row to display the Transaction Snapshot screen. Then select the Transaction Data tab.

Search Options

 Free text search and text filter behavior are described in the following table.

Type of entryAnalyzedNon-analyzed
term

Find entries with this term. This search is case insensitive.

 For example, using the term "great" finds "great" and "AppDynamics is great".

Looks for an exact match and is case sensitive.

  • For example, using the term "order" finds "order" but not "/PlaceOrder.
term1 term2Returns results containing both term1 and term2 irrespective of the order the terms appear.

Terms are implicitly AND'd.

Looks for an exact match and find results containing "term1 term2".

term1, term2This works the same as the space-separated list of terms.

Terms are implicitly OR'd.

Looks for an exact match for either term1 or term2.

term*

term?

Finds all fields where the value is this string plus one additional character <?> or multiple <*>.

Because all non-alphanumeric fields are delimiters, the escape character has no effect.

Finds all fields where the value is this string plus one additional character <?> or multiple <*>.

To search for a field containing a wild card character, escape with a "\".

NOT term Use the NOT comparison operator to find everything except the term. NOT can be used with any of the entries in this table. Use the NOT comparison operator to find everything except the term. NOT can be used with any of the entries in this table.

Free Text Search in Log Analytics

For log analytics, a free text search is available for searching the message field. This enables you to search for any keyword or string anywhere in the message field.