Query Viewers

Query viewers are used to define and run SQL queries on other resources, including trends, assets, cases, connectors, events, and so forth. Each query viewer contains a SQL query along with other logic for establishing and comparing baseline results, analyzing historical data to find patterns in network activity, and performing drilldown investigation on a particular aspect of the results. The query viewer you create displays all the fields specified in the query you select (or create) for the query viewer.

Topics include:

• Pre-Built and Custom Query Viewers

• Managing Query Viewers

• Query Viewer Settings

• Defining and Using Baselines

• Managing Drilldowns from Query Viewers

• Viewing Query Viewer Results

• Troubleshooting Query Viewers

• Adding Query Viewers to Dashboards

• Adding Query Viewers as Startup Views

• Generating Reports from Query Viewers

• Example Queries for Common Scenarios