Build a Query for Logs

This topic outlines how to build a query to filter the event logs. To build a query for the AP List and Client List, see Build a Query for Devices or Clients.

Take the following steps to build a customized query, filtering data in the Logs page:

  1. To access the Logs page, go to Tools > Logs.
  2. To open Query Builder, select > .
    Query Builder starts with a logical group of conditions. You can add more groups, joined with query conditions. Valid conditions between two or more groups:
    • AND
    • OR
    Note

    Note

    AND is the only supported condition within a group.
  3. To add a condition, select + Condition.
  4. From Source Field, select a value that represents a column used in the query.
  5. Select the Operator.
    The available operators depend on the data type. Number types offer comparisons such as greater or less than. Valid values are:
    • Equals
    • Not Equals
    • Contains
    • Greater Than
    • Less Than
    • Less or Equals
    • Greater or Equals
  6. Under Search Condition, provide the value that you are searching for.

    Selecting the Search Condition field displays a drop-down of existing values. The list is filtered as you type. Wildcards are not supported. To match a portion of the search condition, use the operator Contains.

    • To add conditions, select +.
    • To remove conditions, select -.
  7. To add another condition row, select + .
  8. Group — Each group has conditions joined by the selected operator. You can add additional groups or add conditions to the group.
  9. To run the query, select Execute.
    The query is automatically saved.
    Note

    Note

    Query Builder generates a Pandas query syntax. The syntax preview is displayed at the top of the Query Builder dialog. For saved queries:
    • Select to view the Pandas query.
    • Select to copy the Pandas query to the clipboard.
    Click to expand in new window
    Query Builder: Events Query Type Info
    Select from the list of saved queries or create a new query.
    Click to expand in new window
    List of saved queries
    Query Builder actions:
    • New. To create a new query, provide a name and select OK. There is a limit of 10 saved queries per user, per grid. After the 10-query limit has been reached, the New button is unavailable.
    • Rename. Rename an existing query.
    • Delete. Delete the query that is currently displayed.
    • Close. Close the Query Builder dialog. If you close Query Builder without running the query, your query details are deleted.
    • Reset. Close the Query Builder dialog and save the current query. The next time you open Query Builder, this query will display. This option is available after you run a specific query.
    • Execute. Run the query and save it.
    • Save. Save changes without executing the query. Save is only visible when changes have been made.