Changing between Query Bar modes
Print
Copy page Copy as Markdown for LLMs View as Markdown View the page as plain text
Open in ChatGPT Ask ChatGPT about this page Open in Claude Ask Claude about this page Prev Next The NDR Query Bar has three levels of assistance:
Context Sensitive Help mode, which adds descriptions to the 184 available query options to help you construct meaningful queries.
Default mode, or Pills mode, which creates structures pills that help you with query construction.
Expert mode, which does not provide contextual help. Only raw queries using Elasticsearch syntax are permitted.
To select a query bar mode:
Click and from CONFIGURATION , select Search Settings .
Select a setting form the Pick a Search Setting dialog box and then click Submit .
Was this article helpful?
Yes No
Related articles
Intrusion Prevention System (IPS) > Network Detection and Response (NDR) > NDR 4.x > Network Detection and Response Product Guide 4.x > Investigation and Analysis > Searching with Trellix NDR Console
Intrusion Prevention System (IPS) > Network Detection and Response (NDR) > NDR 4.x > Network Detection and Response Product Guide 4.x > Investigation and Analysis > The Search menu
Intrusion Prevention System (IPS) > Network Detection and Response (NDR) > NDR 4.x > Network Detection and Response Product Guide 4.x > Investigation and Analysis > Searching with Trellix NDR Console