Automatic generation of queries using non-textual input
Systems and methods are described for generation of a query using a non-textual input. For example, the query can be generated using a point and click input. A selection of a data source can be identified and an initial query can be automatically generated based on the selection of the data source. A graphical user interface can be displayed and populated with one or more selectable parameters based on the initial query. A selection of the one or more selectable parameters can be received as a non-textual input and a query can be automatically generated based on the selection. For example, a query for execution by a data intake and query system can be generated based on the selection. The query can be provided to the data intake and query system. The data intake and query system may then execute the query on a set of data.
1. A method comprising:
identifying, by a processing system, a selection of a data source;
automatically generating, by the processing system, an initial query for execution in response to identifying the selection of the data source;
causing display, by the processing system, of a graphical user interface, wherein the graphical user interface is populated with one or more selectable parameters based at least in part on execution of the initial query;
obtaining, by the processing system, a non-textual input identifying a selection of at least one of the one or more selectable parameters;
based at least in part on the selection of the at least one of the one or more selectable parameters, automatically generating, by the processing system, a query;
generating, by the processing system, a request comprising the query;
providing, by the processing system, the request to a data intake and query system for execution of the query by the data intake and query system, wherein the processing system and the data intake and query system are distinct systems, wherein providing the request comprises providing the request via a connection with the data intake and query system, wherein the data intake and query system executes the query on a set of data corresponding to one or more events;
obtaining, from the data intake and query system, query results based on execution of the query by the data intake and query system on the set of data;
filtering the query results to identify filtered query results; and
causing display of the filtered query results.
2. The method of claim 1 , wherein the processing system generates queries in a first code language and the data intake and query system executes queries in a second code language.
3. The method of claim 1 , wherein automatically generating the query comprises:
generating a first query in a first code language based at least in part on the selection of the at least one of the one or more selectable parameters; and
translating the first query to a second query in a second code language associated with the data intake and query system, wherein the query comprises the second query.
4. The method of claim 1 , wherein automatically generating the query comprises:
generating a first query in a first code language based at least in part on the selection of the at least one of the one or more selectable parameters;
determining the data intake and query system executes queries in a second code language; and
translating the first query to a second query in the second code language based at least in part on determining the data intake and query system executes queries in the second code language, wherein the query comprises the second query.
5. The method of claim 1 , wherein the non-textual input comprises a point and click input.
6. The method of claim 1 , wherein the set of data is associated with the data source.
7. The method of claim 1 , wherein the non-textual input identifies one or more of a host, a source, a sourcetype, a time range, a tenant, a user, or a partition.
8. The method of claim 1 , further comprising:
identifying one or more credentials; and
establishing the connection with the data intake and query system based at least in part on the one or more credentials, wherein the request further comprises the one or more credentials and an identifier of the connection with the data intake and query system.
9. The method of claim 1 , wherein the query identifies the set of data and a manner of processing the set of data.
10. The method of claim 1 , wherein the query comprises a field extraction query, the query identifying one or more fields of the set of data.
11. The method of claim 1 , wherein the query comprises a filter, the query identifying a subset of the set of data.
12. The method of claim 1 , further comprising:
causing display of the query results.
13. The method of claim 1 , further comprising:
processing the query results to identify processed query results; and
causing display of the processed query results.
14. The method of claim 1 , further comprising:
summarizing the query results to generate a summary of the query results; and
causing display of the summary of the query results.
15. A system comprising:
a data store; and
one or more processors configured to:
identify a selection of a data source;
automatically generate an initial query for execution in response to identifying the selection of the data source;
cause display of a graphical user interface, wherein the graphical user interface is populated with one or more selectable parameters based at least in part on execution of the initial query;
obtain a non-textual input identifying a selection of at least one of the one or more selectable parameters;
based at least in part on the selection of the at least one of the one or more selectable parameters, automatically generate a query;
generate a request comprising the query;
provide the request to a data intake and query system for execution of the query by the data intake and query system, wherein the system and the data intake and query system are distinct systems, wherein, to provide the request to the data intake and query system, the one or more processors are further configured to provide the request to the data intake and query system via a connection with the data intake and query system, wherein the data intake and query system executes the query on a set of data corresponding to one or more events;
obtain, from the data intake and query system, query results based on execution of the query by the data intake and query system on the set of data;
filter the query results to identify filtered query results; and
cause display of the filtered query results.
16. The system of claim 15 , wherein, to automatically generate the query, the one or more processors are further configured to:
generate a first query in a first code language based at least in part on the selection of the at least one of the one or more selectable parameters;
determine the data intake and query system executes queries in a second code language; and
translate the first query to a second query in the second code language based at least in part on determining the data intake and query system executes queries in the second code language, wherein the query comprises the second query.
17. Non-transitory computer-readable media including computer-executable instructions that, when executed by a computing system, cause the computing system to:
identify a selection of a data source;
automatically generate an initial query for execution in response to identifying the selection of the data source;
cause display of a graphical user interface, wherein the graphical user interface is populated with one or more selectable parameters based at least in part on execution of the initial query;
obtain a non-textual input identifying a selection of at least one of the one or more selectable parameters;
based at least in part on the selection of the at least one of the one or more selectable parameters, automatically generate a query;
generate a request comprising the query;
provide the request to a data intake and query system for execution of the query by the data intake and query system, wherein the computing system and the data intake and query system are distinct systems, wherein, to provide the request to the data intake and query system, execution of the computer-executable instructions by the computing system further causes the computing system to provide the request to the data intake and query system via a connection with the data intake and query system, wherein the data intake and query system executes the query on a set off data corresponding to one or more events;
obtain, from the data intake and query system, query results based on execution of the query by the data intake and query system on the set of data;
filter the query results to identify filtered query results; and
cause display of the filtered query results.
18. The non-transitory computer-readable media of claim 17 , wherein, to automatically generate the query, execution of the computer-executable instructions by the computing system further causes the computing system to:
generate a first query in a first code language based at least in part on the selection of the at least one of the one or more selectable parameters;
determine the data intake and query system executes queries in a second code language; and
translate the first query to a second query in the second code language based at least in part on determining the data intake and query system executes queries in the second code language, wherein the query comprises the second query.