Learn the basics of writing basic queries in Humio
After installing Humio on a server, ingesting data into Humio and having this data parsed, you can start asking Humio to dive deep into the data, by making queries against the fields available in the events. Learning how to query data in Humio is an essential step to effectively use Humio.
Figure 70. Process graph
The events ingested and parsed in Humio can be any type of text based data, structured and unstructured, whether it’s from application logs, infrastructure events, network, or other security-related devices or applications.
Querying these event logs captured in Humio means proactively analysing all your data, making the most of it by asking the right questions and finding answers in order to address issues from your business’ use cases.
For example, you may want to have insights on the users visiting your Company’s website, investigating on where they are coming from, whether they lose the connection, whether they experience errors while on the website, and the like.
All this can be achieved by thoroughly searching your event fields, doing calculations and using query combinations that are made possible by the Humio's powerful query language and its numerous query functions — see them in detail at Query Language and Query Functions.
Find more information on the different kinds of event fields you can search in Humio at Querying Events' Fields.
For step-by-step guidelines on how to write and save queries in Humio User Interface, see Managing Queries.
See details on the many actions you can perform with queries at Frequently Used Query Operations.
Writing Better Queries
Find some suggestions on how to write best-performing queries at Best Practice for Query Writing.