Global search

Jump to any AxoConsole page, pipeline object, or integration, or start creating a new object, from a single search field.

Global search is the quickest way to move around in AxoConsole. Type a few characters, then select a result to open it.

Open global search

To open global search, do one of the following:

  • Select the search field in the page header of AxoConsole.
  • Press Ctrl + K (Windows and Linux) or ⌘ + K (macOS).

How results are matched

  • Global search uses fuzzy matching on the title of the item. For objects, the title is the name of the object. If an object has no name, the title is its ID.
  • Results are grouped by type. Each result shows the description of the object under its title.
  • AxoConsole refreshes the list of objects each time you open global search, so objects you created recently are included.

What you can find

Selecting a result opens the item. For most objects, this is the overview or details page of the object.

Pages

The Pages group contains the main pages of AxoConsole: Dashboard, Integrations, Analytics, Search Logs, Flows, Custom Steps, Topology, Sources, Collection Rules, Forwarding Rules, Routers, Connector Rules, Stores, Destinations, Provisioning, Rehydration, Alerting, Activity Logs, Roles, Axoflow (version details and third-party licenses), and Usage Metrics.

Individual rehydration jobs don’t appear in the results. To find a job, open the Rehydration page. For details, see Rehydrate data.

Objects

The objects of your pipeline are grouped by type. The group titles are the following:

  • Sources: Source appliances. Opens the overview page of the source. See Sources.
  • Clusters: Kubernetes clusters. Opens the overview page of the cluster.
  • Edges: Edge hosts. Opens the overview page of the host. See Hosts.
  • Routers: AxoRouter hosts. Opens the overview page of the router. See AxoRouter.
  • Destinations: Destinations that receive data from your pipeline. Opens the overview page of the destination. See Destinations.
  • Flows: Flows that route and process data. Opens the overview page of the flow. See Manage flows.
  • Collection rules: Data collection rules of Axoflow agent hosts. Opens the Collection rules list, filtered to the selected rule. See Edge collection rules.
  • Connector rules: Connector rules of AxoRouter hosts. Opens the Connector rules list, filtered to the selected rule. See AxoRouter connector rules.
  • Forwarding rules: Rules that forward data from edge hosts to routers. Opens the overview page of the rule. See Data forwarding from edge hosts.
  • Store: AxoStore and AxoLake stores. Opens the overview page of the store. See Storage.
  • Provisioning: Active deploy commands. Opens the Provisioning page for the selected deploy command. See Provision pipeline elements.
  • Custom steps: Custom processing steps that group processing steps into a reusable step. Opens the overview page of the step. See Processing steps.
  • If detection is enabled for your organization, the Rules (Sigma detection rules), Policies (detection policies), and Finding Flows groups are also available.

Create actions

Every object group also contains a Create action, for example, Create source, Create router, Create flow, or Create destination. Select the action to open the dialog or page that creates that type of object. For edges, routers, and clusters, the action opens the Provisioning page, where you can generate an install command.

To start creating any object, open global search and type create.

Integrations

The Integrations group contains the products of the integrations catalog. You can search for the name of the vendor or the product. A product has a separate result for each capability it supports: Source, Connector rule, Collection rule, and Destination. Select a result to open the details of the integration on the Integrations page. See Integrations.

Global search and other search features

AxoConsole has three different search features:

  • Global search finds and opens pages, objects, and integrations. It doesn’t search your log data.
  • The filter bar filters the list on the current page, for example, the hosts on the Routers page. For the query syntax, see AQL operator reference.
  • Log search queries the data stored in your stores. See Search.