Pause or Cancel a Search
You can pause or cancel a search when it is in progress. Most users want to cancel a search in progress that is taking too long. You can stop the search and improve your query. You can also pause a search and check timestamps to see what data has been searched so far.
Once you have started your log search the search page will change to provide the options toĀ pause orĀ cancel a search.
Pause a Searchā
Search always retrieves and displays messages in reverse chronological order. Results are found walking backward in time from your most current data and progressing through older data. So, if you pause a search, you can check the timestamps for the messages in theĀ MessagesĀ tab. If you reverse the sort order of the messages so that the oldest message is at the top, then all messages with more recent timestamps have been retrieved and processed.
You can resume a paused search; just clickĀ ResumeĀ under theĀ StartĀ button.
CancelĀ a Searchā
When you cancel a search, you are stopping all progress on the current search and removing all results. Your query remains in the search query field.