Skip to main content

Query Bar Explorer

Query Bar Explorer

Welcome to the Query Bar Explorer, where you can craft precise search queries using the Truss Query Language (TQL). This powerful tool allows you to create complex filters and combine multiple search criteria.

The Query Bar provides advanced filtering capabilities through a flexible query language syntax.

•

Understanding Query Language​

Let's explore how to effectively use the Query Language for advanced filtering.

Basic Query Structure​

First, the filter page will display the current filter within the visual Truss Query Language (TQL) format.

The TQL will be displayed in the breadcrumb filter display and can be manipulated with the following options:

  • Field Names: category, region, tags, etc.
  • Attribute Panel: Clicking on the attribute panel items will add them to the filter
  • Charts Page: Clicking on the charts page panels will add them to the filter
  • Filter Tags: Clicking on the filter tags will remove them from the filter
Basic Query View

Switch the filter view​

You can switch between the Breadcrumb TQL Filter and the Textual TQL Filter display. The same filter addition options will be available in both views (attribute panel or charts page additions). But within the QL view, you will be able to see the TQL syntax and can manipulate the filter with the following options:

Query Results View
  • Operators: AND, OR for combining conditions
  • Values: Enclosed in quotes for exact matching
  • Customizable: Here you can add new filter names that are not currently available in the attribute panel or charts page.
•

Complex Query Combinations​

Complex Query View

More sophisticated queries can be created using parentheses and multiple operators:

  • Grouping: Use parentheses to group conditions
  • Multiple Values: Combine related criteria with OR
  • Field Combinations: Mix different fields for precise filtering

Example: (region="Russia") AND (tags="APT27" OR tags="APT28")

•

Save and Load Filters​

Save Filter​

Once you have a filter set you want to save, you can do so by clicking the 'Save Filter' button.

Complex Query View

A modal will appear where you can give your filter a name and description.

  • Filter Name: A name for your filter
  • Filter Description: A description for your filter
Complex Query View
•

Load Filter​

You can also load a saved filter by clicking the 'Load Filter' button.

  • Load Filter: Click the 'Load Filter' button
  • Select Filter: Select the filter you want to load
Complex Query View

After selecting the filter you want to load, the filter will be applied and the products associated with the filter will be displayed.

Complex Query View
•

Pro Query Tips​

Query Strategies

  • Field Names: Use exact field names from the UI
  • Grouping: Organize conditions logically
  • Operators: Combine AND/OR effectively
  • Validation: Check syntax before updating

Best Practices

  • Start with simple queries and build up
  • Use parentheses for clear grouping
  • Test queries incrementally
  • Save complex queries for future use

The Query Bar is your advanced tool for precise data filtering. Master the Query Language to create sophisticated searches and unlock deeper insights into your security intelligence.