[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-672245-105":59,"doc-detail-672245-en":129},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":122,"head_meta":124,"extra_data":126,"updated_unix":128},105,"en","exabeam-search-quick-reference-guide-version-secops-20212","Exabeam Search Quick Reference Guide - Version SecOps 2021.2","","Exabeam Search Quick Reference Guide - Version SecOps 2021.2 provides practical instructions for performing query searches in Exabeam Data Lake, including how to customize Data Lake for variations in captured data. It explains Search UI input-based criteria, query syntax using a limited Lucene subset, and the use of case-sensitive operators. It also covers search optimization for large data volumes, ways to filter and cross-cluster search, and how to interpret query results through multiple views.",{"@graph":69,"@context":121},[70,84,104],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":30,"@type":76,"position":81},"https://docshare.wps.com/document/technology/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/exabeam-search-quick-reference-guide-version-secops-20212/672245/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":98,"encodingFormat":97,"isAccessibleForFree":99,"interactionStatistic":100},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/exabeam-search-quick-reference-guide-version-secops-20212/672245.png","ImageObject",300,407,{"name":92,"@type":93},"（）","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-11-02",true,{"@type":101,"interactionType":102,"userInteractionCount":8},"InteractionCounter",{"@type":103},"ViewAction",{"@type":105,"mainEntity":106},"FAQPage",[107,113,117],{"name":108,"@type":109,"acceptedAnswer":110},"What is the purpose of searches in Exabeam Data Lake?","Question",{"text":111,"@type":112},"Searches in Data Lake provide visual and contextual options for filtering, extracting, and refining data analysis, including timeline and detailed queries.","Answer",{"name":114,"@type":109,"acceptedAnswer":115},"Which query syntax rules does Exabeam Data Lake support?",{"text":116,"@type":112},"Data Lake query semantics supports a limited subset of Lucene, and logical operators AND, TO, NOT, and OR are case-sensitive and must be uppercase.",{"name":118,"@type":109,"acceptedAnswer":119},"How can large data volumes be handled during searches?",{"text":120,"@type":112},"Use filtered searches to narrow the dataset with context tables, or perform cross-cluster searches to run searches simultaneously across clusters.","https://schema.org",{"og:url":83,"og:type":123,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":125,"canonical":83},"index,follow",{"doc_id":127,"site_id":62},672245,1793587739,{"code":4,"msg":5,"data":130},{"doc_id":127,"user_id":131,"nickname":92,"user_avatar":132,"doc_module":4,"category_id":29,"category_name":30,"doc_title":65,"doc_description":67,"doc_content":133,"file_id":134,"file_url":135,"file_type":136,"file_size":137,"view_count":8,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":46,"language":138,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":139,"faqs":140,"seo_title":141,"seo_description":67,"update_tm":128,"read_time":31},5909898202386,"https://ap-avatar.wpscdn.com/davatar_29158cc5080c5b710cf443261637dec0","Exabeam Search Quick Reference Guide  \nExabeam Management Platform-Version SecOps 2021.2 (DL i40)  \nPublication date March 11, 2022  \nExabeam  \n1051 E. Hillsdale Blvd.  \n4th Floor  \nFoster City, CA 944042  \n1.844.392.2326  \nHave feedback on this guide? We'd love to hear from you!  \nEmail [us at](us at docs@exabeam.com)[ docs@exabeam.com](us at docs@exabeam.com)  \nDisclaimer: Please ensure you are viewing the most up-to-date version of this guide by visiting the Exabeam Documentation Portal.  \nCopyright  \nAll content in this document, including text, graphics, logos, icons, images, and video clips, is the exclusive property of Exabeam or its content suppliers and is protected by U.S. and international copyright laws. The compilation (meaning the collection, arrangement, and assembly) of all content in this document is the exclusive property of Exabeam and is also protected by U.S. and international copyright laws. The content in this document may be used as a resource. Any other use, including thereproduction, modification, distribution, transmission, republication, display, or performance, of the content in this document is strictly prohibited.  \nCopyright ©2022 Exabeam, Inc. All Rights Reserved.  \nTrademarks  \nExabeam, the Exabeam logo, Threat Hunter, Smarter SIEM, Smart Timelines and Security Management Platform are service marks, trademarks or registered marks of Exabeam, [Inc. in](Inc. in) the United States and other countries. All other brand names, product names, or trademarks belong to their respective owners. The marks and logos displayed in this document may not be used without the prior written consent of Exabeam or their respective owners.  \nPatents  \nExabeam owns, and reserves all rights for, patents for Exabeam products and services, which may be protected under registered patents as well as patents pending.  \nOther Policies  \nFor information regarding Exabeam’s treatment of personally identifiable information, please review Exabeam’[s current privacy policy at www.exabeam.com/privacy](s current privacy policy at www.exabeam.com/privacy).  \nTable of Contents  \n1. Exabeam Data Lake Search Quick Reference Overview .............................................................. 5  \n2. How To Run Query Searches In Exabeam Data Lake .................................................................. 6  \n2.1. Syntax .......................................................................................................................... 6  \n2.2. Time Parameters ........................................................................................................... 8  \n2.3. Field Explorer ................................................................................................................ 8  \n2.3.1. Searches Using Exabeam Exa_category ............................................................... 9  \n2.3.2. Searches Using Exabeam Fields ........................................................................ 14  \n3. Results Views In Exabeam Data Lake ....................................................................................... 18  \n3.1. Timeline View ............................................................................................................. 18  \n3.2. Enhanced View ........................................................................................................... 18  \n3.3. Table View .................................................................................................................. 19  \n3.4. Raw View .................................................................................................................... 19  \n4. Time Picker In Exabeam Data Lake ......................................................................................... 20  \nExabeam Search Quick Reference Guide-Version SecOps 2021.2 (DL i40  \nPublished Mar 11, 2022 4  \nExabeam Data Lake Search Quick Reference Overview  \n1. Exabeam Data Lake Search Quick Reference Overview  \nSearches in","cbCaihtiPBjO2TxE","https://ap.wps.com/l/cbCaihtiPBjO2TxE","pdf",1888062,"English","# Exabeam Data Lake Search Quick Reference Overview\n# How To Run Query Searches In Exabeam Data Lake\n## Syntax\n## Time Parameters\n## Field Explorer\n## Searches Using Exabeam Exa_category\n## Searches Using Exabeam Fields\n# Results Views In Exabeam Data Lake\n## Timeline View\n## Enhanced View\n## Table View\n## Raw View\n# Time Picker In Exabeam Data Lake","[{\"question\":\"What is the purpose of searches in Exabeam Data Lake?\",\"answer\":\"Searches in Data Lake provide visual and contextual options for filtering, extracting, and refining data analysis, including timeline and detailed queries.\"},{\"question\":\"Which query syntax rules does Exabeam Data Lake support?\",\"answer\":\"Data Lake query semantics supports a limited subset of Lucene, and logical operators AND, TO, NOT, and OR are case-sensitive and must be uppercase.\"},{\"question\":\"How can large data volumes be handled during searches?\",\"answer\":\"Use filtered searches to narrow the dataset with context tables, or perform cross-cluster searches to run searches simultaneously across clusters.\"}]","Exabeam Search Quick Reference Guide - Version SecOps 2021.2 | PDF"]