LogInsight - need "cancel query" button on interactive analytics page.

[nurlai]

There cases when we need to find a first few occurrences of the event. it could be an extensive search over all time and we want an ability to cancel (stop, pause) the query once few results are found.

the function to cancel the running query exists, but one should navigate to admin page for it. we need a button on interactive analytics page.

thank you,

ildus

[sflanders · Accepted solution]

Hey Ildus,

This feature does exist on the IA page for queries that take a long time to execute (see attachment) - you need to hover over an event once results are returned to see the option (note it is pause/resume). Are you looking for something else?

[nurlai]

Great! Thank you. I did not even know this functionality exists... the following is my explanation why. :smileygrin:

1. This query runs for 5+ mins

It appears that the first sub query is to build the chart while the second sub query will bring over the events.

2. While there are some results in a chart – the events are still not there…

3. Finally, when the events start appearing – there are only few seconds between the first few events and completing the 2^nd “green bar” – the only time to “Pause” the search. No wonder I have never noticed this functionality…

the main wait time was to watch the two green bars moving, after that events all loaded so quickly - there is no really need to pause anything.

thanks,

ildus

[sflanders]

Ah, yes the pause/resume feature is only supported for message queries today (the actual events) and not aggregation queries (the visualization). Feel free to open a feature request on loginsight.vmware.com if you wish to see the pause/resume for aggregation queries.