Add a Query to Blocklist

The documentation explains how to add queries to a blocklist in a database system, which can be done either through the Block & Kill panel or by explicitly adding blocks based on query strings or regular expressions. Administrators with root authorization can specify pattern types, matching criteria, and target repositories when blocking queries, with blocked queries being immediately stopped and prevented from running until an administrator removes the block.

There are multiple ways you can block a query:

  • Use the Block & Kill panel of the Query Monitor page.

  • Explicitly add a block based on a query string or regular expression on the Blocklist page.

To add a query to the blocklist you must have root authorization.

  • Go to the Blocklist page.

  • Click the + Add Item button.

  • You will be prompted to define the block:

    Screenshot of the first step in the Query Blocklist creation wizard showing a dialog with Pattern Type selection options (Regular Expression or Exact Match) and a text field for entering the query pattern to be blocked. This interface allows administrators to define the specific query text or pattern that should be prevented from execution across the LogScale system.

    Figure 13. Query Administration Adding a Block


    • Select the Pattern Type, either Regular Expression or Exact Match.

    • Enter the matching pattern or exact query into the Pattern box.

  • Click Next.

  • You will be prompted to select the repo to which the block applies. If you do not select a repository, the query will be applied across all repositories. You can search for repositories, or select the matching repository from the list provided. You cannot select multiple repositories.

    Screenshot of the repository selection dialog (second step in the query blocking process) showing a search field for finding repositories, a list of available repositories to select from, and action buttons. This interface allows administrators to specify the scope of the query block by either targeting a specific repository or applying the block globally across all repositories when no repository is selected.

    Figure 14. Query Administration Adding a Block Repository Selection


  • Click Block Query.

Note

If you cancel the process, you will be warned that the query block specification will be lost.

Queries that are currently running and match the new pattern are stopped immediately and prevented from running until this entity on the blocklist is removed by an administrator.