Skip to main content
Version: 1.2

Search (TQL)

Route: /dash

The search bar above the dashboard table uses TQL (TobeQueryLanguage) exclusively — there is no plain-text toggle on this screen. Filters use column:operator:value syntax, apply as you complete each clause, and work together with sidebar filters.

Full syntax, operators, AND / OR, quoted values, and autocomplete are in TQL search and filters. This page covers dashboard-specific behavior: URL bookmarks, inline validation, and examples.

See also: Overview · Sidebar filters · Alert history TQL

TaskSection
Write a filterExample queries
Use autocompleteAutocomplete
Read validation colorsValidation colors
Edit or clear filtersEdit and clear

Example queries​

Dashboard examples (see the canonical TQL reference for more):

  • resource:eq:test AND severity:eq:critical
  • resource:eq:"test"
  • resource:eq:"test" AND (severity:eq:critical OR group:contains:test)
  • severity:eq:critical
  • status:ne:closed
  • environment:eq:Production
  • resource:contains:web
  • tags:in:cpu,memory
  • attributes.owner:eq:team-a

Dashboard with TQL filter resource:contains applied

Active TQL is stored in the URL (q parameter) for bookmarks and sharing — for example /dash?q=resource%3Acontains%3Aweb.

Autocomplete​

Follow the shared autocomplete steps in the search field. The dashboard suggests filterable alert columns (most fields except internal-only identifiers).

TQL autocomplete — operator suggestions after typing resource:

Validation colors​

Each complete clause is highlighted inline in the search bar:

AppearanceMeaning
Success (green background)Valid clause — included in the query sent to the table
Danger (red background)Invalid column, operator, or value — clause is not applied

Multiple TQL clauses with validation coloring

Edit and clear​

  • Edit — click the search field and change the text directly; validation updates as you type.
  • Remove a clause — delete that part of the query (or remove the whole bar contents).
  • Reset everything — when the table is empty because of filters, click Reset all filters, or clear sidebar categories in Sidebar filters.

From the details drawer, clicking a field, attribute, or tag appends the equivalent TQL filter and returns you to the dashboard.

Best practices​

  1. Start with autocomplete — fewer syntax errors than typing full expressions.
  2. Bookmark filtered views — copy the URL after applying TQL for shift-specific links.
  3. Combine with sidebar filters for quick severity/status toggles plus precise TQL (for example resource:regex:^prod-.*).
  4. Use the same syntax on History — see Alert history tracking.