Query Administration

Monitor, control, and optimize queries running in your LogScale environment

Workflow 1

New to Query Administration?

Start with the concepts

Learn how LogScale handles queries at the administrative level before you start configuring controls. Understand query costs, resource consumption, quotas, and blocking - so you can make informed decisions when queries impact system performance.

  • Query Cost and Resource Metrics
  • Query Quotas and Limits
  • Query Blocking
  • Organization-Owned Queries
Start Here Workflow 2

Ready to Configure Query Controls?

I understand the concepts - show me how to set it up

You understand how query administration works and are ready to act. Monitor running queries, set resource quotas, block problematic queries, and manage organization-owned queries to keep your environment stable and performant.

  • Query Monitor
  • Killing and Blocking Queries
  • Setting Query Quotas
  • Managing Organization-Owned Queries
Get Started

Workflow 1: New to Query Administration?

Build a solid understanding of how LogScale measures and controls query resource consumption. This foundation helps you set appropriate limits and respond effectively when queries cause performance problems.

1

Query Administration Overview

Understand the tools available for managing queries at the organization level

Query Administration

conceptintermediate

Overview of all query administration capabilities: monitoring running queries, blocking problematic queries, setting resource quotas, and managing organization-owned queries.
2

Understanding Query Costs

Learn how LogScale measures query resource consumption

Query Monitor

guideintermediate

Understand how the Query Monitor displays real-time resource usage for running queries. Learn what cost metrics, CPU consumption, and memory usage mean for system performance.

Cost Points

guideintermediate

Learn how LogScale uses cost points to measure query resource consumption across CPU, memory, and I/O. Understanding cost points is essential for setting effective quotas.
3

Query Quotas

Learn how quotas limit query resource consumption per user

Query Quotas

guideintermediate

Understand how query quotas prevent individual users from consuming excessive resources. Learn about static and live cost point quotas, query count limits, and per-user overrides.

Quota Types

guideintermediate

Understand the difference between cost-point quotas (resource consumption) and query count quotas (number of concurrent queries), and when to use each.
4

Query Blocking

Learn how to prevent specific queries from running

Blocked Queries

guideintermediate

Understand how query blocking works: match query patterns using exact strings or regular expressions, apply blocks at the organization or repository level, and set expiration times.
5

Organization-Owned Queries

Understand how ownership affects scheduled searches, alerts, and dashboards

Organization-Owned Queries

guideintermediate

Learn how organization ownership keeps scheduled searches, alerts, and dashboards running after the user who created them leaves or changes roles. Understand the permissions required and how ownership interacts with query prefixes.

Workflow 2: Ready to Configure Query Controls?

Monitor your environment, act on problem queries, set preventive limits, and manage long-running automated queries.

1

Monitor Running Queries

Use the Query Monitor to observe what queries are running and how much resource they consume

Query Monitor

guideintermediate

Access the Query Monitor to see all currently running queries, their resource cost, the user who submitted them, and how long they have been running.

Display Controls

guideintermediate

Filter the query list by repository, user, or status. Switch between recent queries and all active queries to focus on the most resource-intensive activity.

Query Stats

guideintermediate

Examine detailed resource metrics for individual queries: CPU usage, memory consumption, cost points, and execution time. Use this to identify queries that need attention.
2

Kill and Block Queries

Stop queries that are consuming excessive resources or causing performance issues

Kill a Running Query

guideintermediate

Immediately terminate a running query from the Query Monitor. Use this when a query is consuming excessive resources and needs to be stopped right away.

Block a Query

guideintermediate

Add a query pattern to the blocklist directly from the Query Monitor. Prevents the same or similar queries from running again.

Add a Query to the Blocklist

guideintermediate

Manually add query patterns to the blocklist using exact strings or regular expressions. Configure organization-wide or repository-specific blocks with optional expiration times.

Remove a Blocked Query

guideintermediate

Remove or update an existing block when the query pattern is no longer a problem or the block was too broad.
3

Configure Query Quotas

Set resource limits to prevent any single user from overwhelming the system

Specify Quotas

guideintermediate

Configure default quota settings that apply to all users. Set cost-point and query count limits with time intervals to control resource consumption across your organization.

Default Settings

guideintermediate

Set organization-wide default quotas that apply to users who do not have a specific quota override. Start with defaults before customizing for individual users.

User Overrides

guideintermediate

Grant higher or lower quotas to specific users. Use overrides to give trusted analysts more headroom while keeping stricter limits on general users.
4

Manage Organization-Owned Queries

Ensure scheduled searches, alerts, and dashboards keep running when users leave or change roles

Enable Organization Ownership for a Role

guideintermediate

Grant a role the permission to create organization-owned queries. Only users with this permission can create queries that run under organization ownership rather than a personal user account.

Transfer Ownership of Existing Queries

guideintermediate

Update existing scheduled searches, alerts, and dashboards to run under organization ownership. Use this when onboarding queries that were created by individual users.

Activity Logs for Organization-Owned Queries

guideintermediate

Review activity logs to audit which organization-owned queries are running, who created them, and when they last executed.