What to expect when multiple search terms are used in dynamic focus query

Just to elaborate a bit. This below query without quotes is considered as a query with multiple search terms because of two spaces in this query.

event.text:CI_App-MaxLatency_max >500ms (1s-Intervall)

The spaces in this  query, causes the search to be broken down to 3 parts as follows:

1) eveevent.text:CI_App-MaxLatency_max

2) >500ms

3) (1s-Intervall)

Please note, if you search for multiple terms in the DFQ (dynamic focus query) in this fashion, then the search results are ranked. Individual parts of the query contribute to the search score and the one with the highest score comes up on top. This is the expected behavior.



Have more questions? Submit a request