Look Up Events

The Search page supports event interactions in Table widgets when results contain an @id value. Use this option to look for specific events through their IDs.

To look up an event:

  1. Locate a row in the search results

  2. Select the three-dot menu ⋮ in that row → Lookup events

    Lookup Events row interaction

    Figure 99. Lookup Events


  3. The Search page opens. It displays a query in this format:

    logscale Syntax
    in(@id, values=[idnumber])

    The query looks for details on that specific event. The query returns the @rawstring field in the results.

Timestamp highlight

When looking up events, the Table widget supports timestamp visualization. When the table results include @timestamp fields, hovering over a table row highlights the corresponding time period in the histogram with a blue bar:

Figure 100. Timestamp Highlight