The features of advanced search are:

  • Filtering

    • Search results can be filtered using the properties that they have.

      Example:

      • VMs where IP Address = 192.168.0.1

      • VMs where CPU Usage Rate > 90%

      • VMs where host = ‘host1’

    • Filters can be combined using the following logical operators:

      • and

      • or

      • not

      Example:

      • VMs where IP Address = 192.168.0.0/16 and Network Rate > 1 Mbps

      • VMs where IP Address = CPU Usage Rate > 90% or Network Rate > 1 Mbps

  • Projection

    • Get properties or metrics.

      • IP Address of VMs

      • CPU Usage Rate, CPU Count of VMs

      1. Aggregation (SUM, AVG, MAX, MIN) can be used for numeric properties and metrics.

        • AVG(CPU Usage Rate) of VMs

  • Sorting

    • Results can be sorted using the order by clause.

      • Order: asc or desc (optional)

      Example: VMs order by CPU Usage Rate

    • Limit the # of results

      Example: top 10 VMs order by CPU Usage Rate

  • Group By

    • Search results can be grouped by a given property into buckets. By default, groups by results are ordered by count of entities in each bucket.

      Example: VMs group by Host

      This property returns list of hosts with # of VMs on each host

    • Group by results can be sorted by applying aggregation on numeric properties and metrics

      Table 1.

      SUM(Bytes) of Flows group by Port order by SUM(Bytes)

      Returns list of ports ordered by sum of total bytes for all the flows on that port

      SUM(CPU Count) of VMs group by Host order by SUM(CPU Count)

      Returns list of hosts ordered by sum of vCPUs of all VMs on every host