Query viewers are used to define and run SQL queries on other resources, including trends, assets, cases, connectors, events, and so forth. Each query viewer contains a SQL query along with other logic for establishing and comparing baseline results, analyzing historical data to find patterns in network activity, and performing drilldown investigation on a particular aspect of the results. The query viewer you create displays all the fields specified in the query you select (or create) for the query viewer.
Topics include: