Related pages:

This topic describes UI elements available in the Analytics search screens and focuses on how to create searches in Basic mode. This mode is also called Drag and Drop Search in the UI and enables you to do multi-widget visualization of your search results. In this mode, you add search criteria based on the fields collected for the event type. Field search enables you to search for all values or a specific value of the field. 

UI Elements

The following UI elements are available to help construct your searches:

Basic Search

To create a search using a field:

  1. From the Analytics Search list, click + Add.
  2. To use basic mode and multi-widget visualizations, select Drag and Drop Search.

    To use advanced mode (ADQL) and single-widget visualizations, see Create Advanced Analytics Searches for details.
  3. On the Data tab, select the data source you want to search.
     
  4. To add filters to your search, click +Add Criteria.
    The field selector drop-down appears, so you can select the field you want to use.
  5. Select a field. The field name appears in the search criteria line.
  6. Click the drop-down next to the field name to open the field value selector. Select a value for the field. 

    Fields such as application, business transaction, and node display a list of the values available. Some fields show a search box where you can enter criteria to filter the values of this field.

Search Options

 Free text search and text filter behavior are described in the following table.

Type of entryAnalyzedNon-analyzed
term

Find entries with this term. This search is case insensitive.

 For example, using the term "great" finds "great" and "AppDynamics is great".

Looks for an exact match and is case sensitive.

  • For example, using the term "order" finds "order" but not "/PlaceOrder.
term1 term2Returns results containing both term1 and term2 irrespective of the order the terms appear.

Terms are implicitly AND'd.

Looks for an exact match and find results containing "term1 term2".

term1, term2This works the same as the space-separated list of terms.

Terms are implicitly OR'd.

Looks for an exact match for either term1 or term2.

term*

term?

Finds all fields where the value is this string plus one additional character <?> or multiple <*>.

Because all non-alphanumeric fields are delimiters, the escape character has no effect.

Finds all fields where the value is this string plus one additional character <?> or multiple <*>.

To search for a field containing a wild card character, escape with a "\".

NOT term Use the NOT comparison operator to find everything except the term. NOT can be used with any of the entries in this table. Use the NOT comparison operator to find everything except the term. NOT can be used with any of the entries in this table.

Free Text Search in Log Analytics

For log analytics, a free text search is available for searching the message field. This enables you to search for any keyword or string anywhere in the message field.