Keyboard shortcuts

Press or to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

Blocking Commands

Some commands are blocking because they require buffering or synchronization of events in order to perform their functions

These commands may block the stream until they have enough data to produce an output event, but not all blocking commands behave this way

Available Blocking Commands

CommandDescription
statsCalculate statistics over all events in a given search
switchRoute events to different subsearches based on match conditions
timechartCreate time-series charts from event data