Scheduled Views
Scheduled views are pre-aggregated datasets that Kloudfuse generates at scheduled intervals to improve query performance and efficiency. Instead of expensive real-time queries on raw data, scheduled views store advance results, enabling faster access to summarized information.
Consider the following benefits of using scheduled views instead of regular queries:
-
Scheduled views have a significantly smaller footprint, and use much less storage than complete logs.
-
Scheduled views update every minute for near real-time data availability.
-
When you store precomputed results, the system processes the query and saves the aggregated results separately from the log data.
-
When you access scheduled view results through FuseQL (instead of running raw data queries), it ensures faster performance with current insights.
-
You can design your retention policies to optimize both storage and accessibility to older data by only the relevant data that is both abbreviated and aggregated. This enables better reporting without significant overhead.
|
You must use an aggregate operator when defining a scheduled view. |
Navigate to Scheduled Views
To begin working with scheduled views, follow these steps:
-
Select the Logs tab, and then the Scheduled Views option in the dropdown menu.
-
The Scheduled Views report appears.
Using Scheduled Views
The Scheduled Views report has the following information and affordances:
-
The Search feature enables you to search across all existing scheduled views.
-
Make a new scheduled view by clicking the Create scheduled view button.
-
Use the List of scheduled views to review what views are already available, and to manage them.
-
The first column of the list displays the Status of the view. Views can be Active or Paused.
-
View Name is either generated sequentially (see view3, view4), or a custom name you assign to the view when you create it.
-
FuseQL is the SQL level definition of the query that defines the view; note that we are using the FuseQL piped dialect.
-
Created at is the timestamp of when the view is created.
When you hover the cursor over one of the rows that represent a scheduled view, Kloudfuse displays action options. Choose one of them to perform these actions:
Create a scheduled view
This is how to create a scheduled view:
-
In the default Logs > Scheduled Views interface, click Create scheduled view.
-
The Create scheduled view page appears.
-
In the interface, specify:
-
Click Create.
-
The new view appears the list of views.
View Logs
-
In the list of Scheduled Views, hover the pointer over the view you plan to examine.
In this example, we use
view4, which is defined as* | count by (level) -
Click the View Logs option.
-
The list of logs that match the view appear.
The Search parameters are, by default, for
_view=<view=name>. In the following example, it is_view=view4.The default time interval is for the preceding 5 minutes. You can adjust this by changing the time picker. In the following example, the time interval is for the last minute.
The columns in the table are extracted from the view definition for the logs. They always include Timestamp. In this example, the aggregation is _count, and the metric is level.
Pause or Resume Scheduled view
Disable or pause the scheduled view to temporarily stop updates without deleting it, and then resume processing as necessary.
-
Hover your pointer over the view you plan to pause, and click the Pause option.
-
Notice that the status changes to paused (grey indicator).
-
To resume collecting data into the scheduled view, hover your pointer over the view you plan to use, and click the Resume option.
Delete Scheduled view
Delete a schedule view to stop collecting data.
|
You can still use a deleted view in a query. Be mindful that like all data, scheduled views have a retention timeframe that expires. |
-
Hover your pointer over the view you plan to delete, and click the Delete option.
-
Notice that the view is no longer in the list of available views.
