Search queries executed by XpoSearch return the following:

• A graphical presentation of matching events over time, with ability to see the distribution of events over the multiple log sources
• A summary panel of the search results, with the ability to set the number of results per page and navigate to any page
• For a simple search - the matching log events from all relevant logs
• For a complex search - a summary table of the matching events per search criteria

Analyzing Search Result Events

The execution of a Simple Search generates all events that match the search query, up to the maximum allowed by the system. A summary panel is displayed above and below the list of events, enabling you to view the summary of the search and to navigate to any page in the search. You can view the analytics of any event, and view the event in a log viewer. You also have a choice of expanding all events to see their stack traces, and disabling analytics of events (which is normally enabled).

Expanding/Collapsing All Events

XpoSearch enables you to view detailed stack trace information of all resulting events, provided that the events have stack traces. This feature makes it possible for you to see the cause of any event. You can also close the stack traces of all events.

To expand all events: 

• In the Events toolbar, click the Expand Events icon .

To collapse all events: 

• In the Events toolbar, click the Collapse Events icon .

Enabling/Disabling Analytics of All Events

By default, while XpoSearch searches for all events that match your search query, it also performs analytics on all events, colorcoding the fields according to their severity, and displaying the severity of the events. You can disable analytics, so that XpoSearch only performs the search. 

To disable analytics of all events: 

• In the Events toolbar, click the Disable Analytics icon .

To enable analytics of all events: 

• In the Events toolbar, click the Enable Analytics icon .

Viewing the Analytics of an Event

You can view the analytics of any event.

To view the analytics of an event: 

1. Navigate to the page which contains the event for which you want to open the analytics, and hover over the event.
   A menu appears to the right of the event.
2. In the menu, select Analytics.
   The analytics page for this event opens under the Analytics tab, showing .          . See             for a detailed explanation of this screen.

Viewing an Event in the Log Viewer

You can view the details of any event in the log viewer, as well as the events preceding and following the matching event.

To view an event in the log viewer: 

1. Navigate to the page which contains the event that you want to view in the log viewer, and hover over the event.
   A menu appears to the right of the event.
2. In the menu, select Log Viewer.
   A notification box opens, informing that the system is loading the log. The Export to PDF notification box appears if pop-ups are blocked. If so, click Continue.
   The Log Viewer opens under the XpoLog tab, showing .          . See             for a detailed explanation of this screen.

Navigating to a Page of Events

You can navigate to any page of search results.

To navigate to a page of events: 

1. In the Events Summary Panel, in the Page Selection Area, click the  and icons to display the previous/next event page numbers, until the page number that you want to view appears.
2. Click the page number.
   The events on that page are displayed in the Search Results Area.

Setting the Number of Events Per Page

By default, 25 events are displayed per page. Instead, you can set the system to display either 10,50, or 100 events per page. 

To set the number of events per page: 

• In the Events Summary Panel, in the Event Number per Page textbox, select from the dropdown list the number of events to display per page.