Data Query Properties

Data query nodes in a runbook An automated workflow that executes a series of steps or tasks in response to a triggered event, such as the detection of anomalous behavior generating an incident, a lifecycle event, or a manually executed runbook. share a common set of properties. Use this page to find detailed information about each property area.

• How Filtering Works in Runbook Nodes: How filter sources work (e.g. from trigger, input, or any previously executed node).

• Filters: Reduce the set of objects (applications, devices, interfaces, and others) examined by the query. Includes dimensions and options (None, Specific, From Trigger, From Previous Node).

• Label: Name the data query node for clarity in the runbook.

• Limits: Constrain the query by the number of objects, the metric used, and the time interval.

• Metric Collection: Choose which metrics to collect and how they are formatted (summarized or time series), and over what time interval.

• Output: View the parameters that the node receives from the preceding node in the runbook. This area is read-only and shows the data passed into this query.

• Advanced: View an example of the JSON that this data query outputs. Use this to understand the structure of the data for use in downstream nodes.

Some data query nodes have additional properties. For example, the Data Store node includes Data Type and Group by. See each node's topic for node specific details.