Add a Query to the Blocklist

Organization owners or administrators with root access can add queries to a blocklist through either the Query Monitor's Block and Kill panel or by explicitly adding blocks based on query strings and regular expressions. The process involves selecting pattern types (exact match or regex), defining matching criteria, and choosing whether to apply blocks organization-wide or to specific repositories, with any matching queries being immediately stopped and prevented from running until an administrator removes the block.

There are two ways to block a query:

Important

To add a query to the blocklist you must have root access.

To add a query to the Blocklist page:

  1. Go to the Blocklist.

  2. Click the + Add Item button.

  3. You will be prompted to define the block:

    Screenshot of the LogScale Query Administration interface showing the first step of adding a query block. The dialog displays a form where administrators can define blocking parameters with two main options: Pattern Type selection (dropdown menu to choose between 'Regular Expression' or 'Exact Match') and a Pattern input field where the query text or regex pattern to be blocked can be entered.

    Figure 22. Query Administration Adding a Block


    • Select the Pattern Type: either Regular Expression or Exact Match.

    • Enter the matching pattern or exact query into the Pattern box.

  4. Click Next.

  5. You will be prompted to select the repo to which the block applies. If you do not select a repository, the query will be applied across all repositories. You can search for repositories, or select the matching repository from the list provided. You cannot select multiple repositories.

    Screenshot of the repository selection dialog (second step in the query blocking process) showing a search field for finding repositories, a list of available repositories to select from, and action buttons. This interface allows administrators to specify the scope of the query block by either targeting a specific repository or applying the block globally across all repositories when no repository is selected.

    Figure 23. Query Administration Adding a Block Repository Selection


  6. Click Block Query.

Note

If you cancel the process, you will be warned that the query block specification will be lost.

Queries that are currently running and match the new pattern are stopped immediately and prevented from running until this entry on the blocklist is removed by an administrator, or until the query is changed in such a way that it no longer matches the pattern defined in the block.