Searching your data

You can view your data in a clear and organized manner, in the form of histograms and data tables, by selecting the fields to include as search parameters that filter the results.

Exploring data tables

Your data can be neatly visualized in a structured format with the help of data tables, which display organized data in the form of rows and columns. The results table displays the transformed data corresponding to the selected columns. You can click on the search icon, under the 'DETAILS' column for viewing the entity details. Click the Columns dropdown button to view or toggle the currently selected options. To save a copy of the data table, click the Download button located above the table. Select your preferred format CSV or JSON. The file will be automatically downloaded to your device.

You can customize the columns returned for your search based on your requirements, by clicking on the Customize button. This will take to to the "Configure Device Column Layout" page, from where you can add or remove columns. You can drag the column names into the order you would like. For fields that are variant/JSON typed, its possible to add the column containing the entire object or select an individual key from the object to display. Click on Update to save the changes. 

To discard all the changes and revert to the default settings, click on the Reset to Default button. Click on Return to Search to go back to your search page.

Filtering data

You can indicate the type of data that you prefer to visualize, by selecting the required data table, for e.g., Asset, File, Service, User, etc. from the Search For dropdown.

Data types used for filtering

String: a sequence of characters used to represent text data

Numeric: represents numbers, including integers, floating-point numbers, and other numerical values

IP Address: An IPv4 address is a 32-bit numerical identifier that is typically represented as a string of four decimal numbers separated by periods, where each number represents an octet (8 bits) of the address. An IPv6 address is a 128-bit numerical identifier that is typically represented as a series of eight groups of four hexadecimal digits separated by colons

Datetime: structured data type with various fields such as year, month, day, hour, minute, second, and timezone information

Object/Variant: key-value store of a mix of different data types, such as integers, strings, or booleans

Boolean: represents two possible values: true or false.

Selecting data in response

You can use the filter options in DataBee by entering the value for the Search Parameters such as the date and time duration, IPv4 or IPv6 of the asset, FQDN, etc. There is also an option to add additional parameters which can be selected using the Add Parameter dropdown. After entering the data into the search parameters, click on the Search button to view a graphical representation of your data.

You can copy your current search as a string by clicking on the Copy Search button. This can be entered in the query field while creating dashboard widgets.

The Save Search button is used to save your search queries for later use. On clicking, you will be prompted to a dialog box with the search query already filled in. Now you can provide a suitable Query Name and save it.

To access all the saved searches, you can simply click on the Saved Searches button, which will display a comprehensive list of all the searches that have been saved up until now. In addition, you can load or delete any of the saved search queries directly from the pop-up window, providing a flexible and efficient way to manage searches. Saved Searches are stored on a per-user basis and are not sharable with other users.

Click on the Saved History button to view a list of all the searches you have performed until now. By clicking on the Load button, you can instantly perform the search without having to re-enter the filtering criteria. Saved History is also stored on a per-user basis and is not sharable with other users.

Raw SQL Search

You can perform advanced searches using complex SQL queries within your datalake to search and filter large sets of data. This type of search allows users to perform detailed searches and analysis of data stored within the datalake such as to searches involving joining multiple tables, summarizing or aggregating data and grouping and ordering results. These searches can be performed using SQL syntax, allowing users to write complex queries to extract the data they need.

Click on the Snowflake Worksheet (or Databricks Worksheet) button. You will be redirected to the datalake login page. Enter your account credentials to log in to your instance. Once logged in, you can use the query console to perform search queries on your data. The query console provides an interactive interface for executing SQL queries, allowing you to easily explore and analyze your data in real-time.

For more information on creating raw Snowflake SQL queries, click here.

For more information on creating raw Databricks SQL queries, click here.