Filters allow you to view a dashboard with only a subset of data. The filter widgets are drop-downs filled with distinct values for a field in the database. The system currently supports the following field types:
There is a maximum limit of 1000 values.
When creating a filter, you can choose whether users can select a single value or multiple values within the same filter widget.
Filter widgets operate on a dashboard level and apply to charts in all tabs.
When you select values from the drop-down menu of a filter widget, the system translates the filter into an NQL
where clause, which it then inserts into all relevant queries in the dashboard.
NQL query implementation of two or more filters
The following scenario exemplifies how the system applies to the NQL query two filters selected on the Dashboard page.
Values from different filters are combined with a logical
| where device.platform == Windows and device.hardware.manufacturer = “Dell”
NQL query implementation of multiple filter values
Following the example above, you can choose more than one manufacturer to filter the dashboard further.
Multiple values from the same filter widget are combined with a logical
| where device.hardware.manufacturer == "Hewlett-Packard" or device.hardware.manufacturer == "Dell"