Checking the Status of a Search

At the very bottom of the User Interface some items provide information on the status of a search.

  • Query Status indicates whether the query execution is completed.

  • Hits are the number of events actually visited by the first aggregate, not to be misled by the total number of events returned. For example, in a query that specifies a certain number of events in the tail() function, should there be any filter specified before that function, then the number of actual hits for that query is given by the filter, not by the function.

  • Speed is the query speed in terms of GB per second.

  • EPS Events per Second, number of events hit each second.

  • Work indicates the cost of a query in terms of CPU usage and memory allocation combined. Can be used as benchmark value to compare two different queries.

  • Completion gives the percentage of completion of the running query.