Let's start by watching this video on searching in Iris.
Basic searching within Iris
The main search bar is similar to a Google search page and works in a similar way. It is the fastest way to find a graph in Iris, but you have to know at least a little about what you are looking for.
Main Search Bar
The search bar is designed to get you data really quickly. It is useful to know a little about your customer and the Iris system to use this facility. Partial words are perfectly acceptable, and the more words to add to the search, the narrower the results will be.
Some examples of what you can type into the search bar are:
Using Timeframe Keywords
There are a few keywords that can be added to the search criteria to assist in presenting data in a certain time/date range. Here are some examples.
Using consecutive words in the search terms means that they must ALL match the search criteria. For example, “za-ter-pe1 capacity fe0/1” will really narrow down your results to only capacity graphs on the device za-ter-pe1.
You can use other keywords as well to search in Iris. Let’s have a look at a few examples.
|mnemonic::<searchcriteria> e.g. mnemonic::cisco|
The Iris system will match graphs where the description is link to cisco2900 but not graphs where the router type is Cisco.
device::<searchcriteria> e.g. device::PE1-JH
The Iris system will match graphs where the device is PE1-JH but not where description is link to PE1-JH.
customers_code::<searchcriteria> e.g. customers_code::abc001
The Iris system will match graphs where the customer code is abc001 but not where the device is ce1.abc001 or where the description is line link to abc001.
Starts with "^" and Ends With "$"
Used in a search string, the Caret symbol means starts with and the Dollar symbol means ends with.
|^Inter means find everything that starts with Inter.|
Internet$ means find everything that ends with Internet.
The Caret is at the start of the search string and the Dollar is at the end of the word to search for at the end of the sentence. There is no space between the search word and the operator.
OR and NOT
IRIS Searches can combine these Boolean functions infinitely in a search string to obtain the data you are looking for. The Search interface has the ability to show a set of data EXCEPT data that is prefixed by a ! (bang or exclamation mark).
Let’s have a look at some examples.
This will display all graphs that have the word internet in any field, but will hide graphs that match discards.
NOTE there is no space after the !.
internet packets or traffic
This will match graphs that contain internet, packets and traffic.
By leaving out the or in the above example will mean that all the words must match at least once for each graph displayed. This is the same as Boolean AND. Don't add the word AND to your searches, rather use OR or space.
You will start by building up your search strings from the description line and then narrowing down to what you need. Let’s have a look at an example.
|You could build this search for unused DSL traffic graphs for a month on the device pe1.jhb1.za.|
dsl jhb pe1
dsl jhb pe1 traffic
dsl jhb pe1 traffic !unused
dsl jhb pe1 traffic !unused month
Your criteria doesn’t have to match completely, just a few characters will suffice.
Below we are searching for traffic graphs for links for a single client with badly implemented router descriptions for a month. We will be using the OR function to group them together into a single search. Here is an example.
traffic jhb-001 or jnb-002 or johannesburg3 or link4-JHB or jhb-internet month
For the next article, click on the track that you are following:
To return to the contents page, click on the track that you are following: