This article contains instructions for Xray versions 1.5 and 1.6 and Track versions 11.0 and later.
A View represents a named query whose result is evaluated on a defined interval. After each periodic evaluation, the results are cached for quick retrieval. The implementation is analogous to an SQL Materialized View.
Views can be implemented directly using jKQL, or through the user interface.
Let’s define a simple View using jKQL:
Upsert View Name='TestView',
jkql='Get Number Of Events Group By EventName',
Schedule='1 day';
This view will be evaluated every 1 day, and the result of the query will be cached.
Let’s define the same view through the user interface.
Create a view (v11.2)
On the left toolbar, select Administrator Settings > Views.
For further instructions, refer to version 1.6.
Create a view (v1.6)
- Main Menu > Admin Settings > Views.
- Click Create.
- Enter a Name for the view.
- Enter the Query that defines the data that the view obtains.
- Select the format for the Schedule expression: jKQL time interval expression or CRON expression.
- In the Schedule field, enter the interval at which the query will be run and the frequency (Day, Hour, Minute, or Second).
- Select the Repository.
- Enter the Dataset name to be used.
- Click Create. The new view is added.
Edit a view (v1.6)
- Click the edit icon for the view.
- Make your changes.
- Click Save.
Clone a view (v1.6)
To create a new view based on an existing view, use the clone function.
- Click the clone icon for the view you want to copy. By default, the name of the new view is the name of the cloned view followed by "Copy."
- Enter a name for the new view.
- Make any other desired changes.
- Click Create..
Delete a view (v1.6)
- Click the delete icon for the view you want to remove.
- Click Yes at the confirmation message. The view is removed.
Create a view (v1.5)
You can define a view using the Create button on the Views tab of Admin Settings. It would look like this:
Edit, delete, activate, or deactivate views (v1.5)
When views are displayed in a viewlet, you can edit, delete, activate, or deactivate Views directly from the query results. Select the view to display an action menu.
Refer to the jKQL User’s Guide for more information on views.