A source is the name TrueSight Pulse uses for anything that sends data. Sources are tracked each time a piece of data is sent. For instance each time a metric sends in data the system will track the meter name as a source. Using this data, TrueSight Pulse can easily filter display data based on an easy to use query language.
Source queries is a feature which allows TrueSight Pulse users to query sources. There are a couple basic rules to keep in mind when writing a Source Query:
- Query identifiers are quering the name of the source unless otherwise specified
- Results will only include sources that have been active in the last 24 hours by default
Exact Match Query:
This query can only return a source which has a name of "service-24.prod.domain.com".
This query will return all sources from in your account that has prod in the source name and has sent data within the last 24 hours. Valid matches would include:
Relative Active Time Queries:
This query will return all sources that have been active (sent data) in the last 2 hours.
Relative Active Time w/ Comparisons:
last > 2h
This query is the equivalent to the previous example.
Binary Comparison "AND" Queries:
*prod* && last: 2h
This query will return only the matching sources that matched in our simple wildcard query example earlier which have sent data within the last 2 hours.
Binary Comparison "OR" Queries:
*prod* || last: 2h
This query will return the matching sources from our simple wildcard query example as well as any other sources that have been active within the last 2 hours.
Chained Comparison Queries:
*prod* || *staging* && last: 24h
This query is effectively processed like ((prod || staging) && last: 24h) due to typical order of operations.