The Wavefront Query Builder makes Wavefront even more accessible to all users in your organization. The Query Builder is a layer on top of the Wavefront Query Language, and is not a replacement for the Query Editor. Query Builder supports most elements of the Wavefront Query Language, though a few of the more advanced functions are only available in the Query Editor. This includes functions such as aliasMetrics(), if(), retainSeries(), etc. For further information on these functions, see Wavefront Query Language Quick Reference.
Note After you manually edit a query built using Query Builder, you cannot return to editing using the Query Builder.
For a video overview, see:
Enabling Query Builder
You can enable or disable Query Builder in your user preferences.
- If Enable Query Builder and Always Open the Query Builder are both checked, then the Query Builder always displays when you navigate to a blank chart or new alert.
- If Always Open the Query Builder is not checked, then the Query Editor displays by default. Query Builder displays only if you click the query builder toggle.
To switch from Query Builder to Query Editor, click the toggle. Note You cannot switch from Query Editor to Query Builder if any part of the query has changed.
In Query Builder, a query consists of a metric, zero or more filters (i.e. sources, source tags, and point tags), and zero or more functions. You build the query from these elements, and the query displays below.
To use a constant value or the value of another query instead of a metric, you can toggle the metrics field by clicking the metrics selector:
To preview the result of each evaluation step in real-time, click the bar chart icon at the end of each field:
Applying Filters and Functions
You can AND and OR multiple filters together and follow with chained functions. Unlike manually constructed ts() queries, which allow mixed ANDs and ORs, the Query Builder applies either AND or OR to all filters.
Functions are organized in a two-level hierarchy (e.g. Aggregation->Sum). A preview of the result of applying any function displays when you mouse over the function name. The full ts() expression is also shown in each preview window for reference.
The order of evaluation is left to right (i.e. metrics, then filters, then functions). As with the query language, wildcard matching is supported for metrics, sources, and tags. You can remove any link of the expression chain by clicking the icon of that link. The rest of your expression remains intact.