Skip to main content

Filter your data ►

The search and filter tools let you focus on the type of data you're looking for, or find specific items by searching for their specific attributes.

Searching and filtering are combined to help you investigate and locate incidents and alerts faster. Moogsoft combines text-based searches and non-textual searches, so you can even filter by tags and location to return meaningful data results. User-defined tags and location can help identify useful correlations, but they can also be used to help you investigate incidents or alerts faster. This means you can search using keywords, filter the results, and save any query for later reuse at the click of a button. Note that filters can also be used in combination to narrow down your results.

Define the columns that display by clicking the three lines at the top of any column.


Reorder columns by dragging the column headers to new locations.



You can filter your data in the Incidents, Alerts, and Metrics views by building a grid filter.

  1. Click the X at the right of the search box to clear any current searches.

  2. Click the Filters tab at the far right of the search bar.


    Alternatively, you can access the filter for each column by clicking the filter icon under the column header.

  3. In the Filter panel, click the name of the column to filter and add the filter terms.


    To filter using dates and times, you can either type out the value or click the calendar icon to open the date and time selector.


    For columns that contain predetermined possible values, select the values to display.


For information on filtering using the API, refer to the API documentation.

Save a query

You can save your current set of column filters as a query for future use. Click Save Options > Save as new query. Name your query and then save it.


All users, regardless of role, can save their filter queries.

Apply a saved query

To access your list of saved queries, click the name of the currently applied query (or Unsaved Query, if filters are applied but not saved) and select a query from the list.


Set a query as the default

The query "Open Incidents" displays when you first access a data view. You can set your own default query.

  • Apply a query to your view. Click Save Options and then Set as default. The selected query becomes the new default.



  • Incident and alert filters support different sets of fields. This means that you cannot necessarily use filters across data types.

  • Make sure you are using the latest data: use automatic page refreshing to update incidents and alerts as often as you need.

    • Choose the auto refresh interval from the list to enable auto refreshing.

    • Manually click the refresh button to refresh on demand.

  • To reload the default filter, refresh your browser tab.

  • Click the Grid Options menu to access copy and paste options as well as shortcuts to change incident status.