Managing Query Viewers

Query viewers provide a shortcut alternative to running SQL queries as a part of reporting. Keep in mind that query viewers use base queries, so a first step in creating a query viewer is deciding what SQL query you want to use. If you can’t find one that does what you want, you’ll need to create one first, then use it as the base query for a new query viewer.

The high-level steps for creating or editing a query viewer are as follows:

1. Identify your questions and what information you are looking for. (For example, “What types of actions represent the highest volume of events on my network during various times of day?”)

2. Based on the question you want answered, decide what kind of query you need and determine whether it is available or you have to create it.

   If you have not created a query for this query viewer, see Building a Query.

3. Select Query Viewers in the Navigator.

4. Right-click a group (folder) and select New Query Viewer.

   Note: As a general rule, create new content in your own user's own folder.

   To edit a query viewer, right-click and choose Edit Query Viewer.

5. In the edit panel, define general attributes for the query viewer as described in Query Viewer Attributes. At a minimum, fill in the required values (red asterisks) on the Attributes tab (query viewer name and base query to use).

   Note: You cannot change the base query after the query viewer is saved. If you want to use a different base query, create another query viewer for it.

6. Select the Fields to display for the query viewer as described in Query Viewer Fields. (Fields are inherited from those available in the base query.)

7. Define Variables for use in the query viewer as described in Query Viewer Variables (optional).

8. Specify any Drilldowns you want to include with the query viewer as described in Managing Drilldowns from Query Viewers (optional).

9. Optional: To add information in the Notes tab, refer to Using Notes.

10. Click Apply or OK to create the new query.

    Note: Click Apply or OK frequently to save settings periodically as you work through the above steps. Clicking Apply saves settings and leaves the Editor open. Clicking OK saves settings and closes the Editor for this query. If you do not apply or accept settings using one of these buttons, your settings are not saved.