Analyzing Complex Search Results

A Complex Search generates a summary table which shows the number of events per field in the query.

Corresponding to the complex search parameters, the results summary table presents data such aggregation values, time, max, min or other values per the function executed in the complex search.

The values are clickable - click on each aggregated event in order to drill down to the relevant log records.

In order to understand the results data table it is imperative to understand the complex search, how data was filtered, what time interval the system computed and what functions and group by field were used.