- Simple search – initial search, using simple search syntax, which when executed results in a list of matching events
- Complex search – an advanced search, using complex search syntax, which when executed results in a summary table of matching events, or transactions
A search can be executed in be run in three stages:
- Initial search
- Refined search
- Complex search
In the initial search, the user enters a search query of simple criteria, and the search is executed on runs on all the event data. In this simple search, the user can search the event data for a simple term or more than one term, perform a Boolean search, a search with wildcards, or a column-based search.
The execution of the Running the search query returns a list of all matching events from all relevant logs (latest on top). In addition, XpoSearch returns a graphical view of the distribution of the matching events over time and per data source.
Complex search queries are used to perform advanced complex operations and reporting on the log events resulting from a simple search. Execution of Running a complex search query results in a summary table, and can also be visualized as gadgets in XpoLog Dashboards.