- play_arrow What's New for JSA Users
- play_arrow Capabilities in your JSA product
- play_arrow Dashboard Management
- Dashboard Management
- Default Dashboards
- Custom Dashboards
- Creating a Custom Dashboard
- Using the Dashboard to Investigate Log or Network Activity
- Configuring Dashboard Chart Types
- Removing Dashboard Items
- Detaching a Dashboard Item
- Renaming a Dashboard
- Deleting a Dashboard
- Managing System Notifications
- Adding Search-based Dashboard Items to the Add Items List
- play_arrow Offense Management
- play_arrow Log Activity Investigation
- play_arrow Network Activity Monitoring
- play_arrow Asset Management
- play_arrow Chart Management
- play_arrow Event and Flow Searches
- play_arrow Custom Event and Flow Properties
- play_arrow Rules
- play_arrow Historical Correlation
- play_arrow Juniper Networks X-Force Integration
- play_arrow Report Management
Searching with the Visual Query Builder
You can use the visual builder to search for specific event and flow data without any knowledge of Ariel Query Language (AQL).
From the navigation menu, click Search, and select the Visual builder tab.
If you want to enable quick filtering of simple terms from your results, toggle the Quick Filter switch, type a value to filter, and press Enter.
Select a boolean IF operator for your condition set.
AND includes only data that meets all of the conditions in your set.
OR includes data that meets any of the conditions in your set.
Select a Condition to search for.
Examples include source or destination IP addresses, geographic locations, event names, log sources, and many more.
Select an Operator, such as Equals, Does not equal, or a value specific to that condition.
Type or select a Value, or use the toggle icon to display child values.
To add more conditions to your set, click Add another condition, then repeat Steps 4 to 6 to define each condition.
To add another condition set to your query, click Add condition set, select the AND or OR boolean operator, then repeat Steps 4 to 6 to define each condition in the new set.
After you finish defining conditions, click Run Search.
