Abstract: Systems and methods are disclosed for recommending query parameters to a user based on tenant information. The system can identify a token query parameter from a portion of a query entered in a user interface. The token query parameter can correspond to a system query parameter, such as a query command, a function, etc., or to a user query parameter. The system can identify a tenant of a distributed data intake and query system that is associated with the query. Based on the token query parameter, the system can identify at least one query parameter associated with the tenant. The at least one query parameter can include one or more query parameters previously entered by the user or other users of the tenant, etc. The system can cause the user interface to display one or more recommended query parameters for inclusion in the query.

Abstract: Systems and methods are disclosed for recommending query parameters to a user based on tenant information. The system can identify a token query parameter from a portion of a query entered in a user interface. The token query parameter can correspond to a system query parameter, such as a query command, a function, etc., or to a user query parameter. The system can identify a tenant of a distributed data intake and query system that is associated with the query. Based on the token query parameter, the system can identify at least one query parameter associated with the tenant. The at least one query parameter can include one or more query parameters previously entered by the user or other users of the tenant, etc. The system can cause the user interface to display one or more recommended query parameters for inclusion in the query.

Abstract: Systems and methods are disclosed for generating queries based on a portion of a query that is entered in a user interface. The system can identify a token query parameter from the query entered in the user interface and use the token parameter to generate one or more other queries. The other queries can include query commands that return information or characteristics about the data that is to be searched. Using the results of the one or more queries, the system can provide one or more recommended query parameters for the user to include the query entered in the user interface.

Abstract: Systems and methods are disclosed for recommending query templates to a user. The system can identify a token query parameter from a portion of a query entered in a user interface, and use the token to identify a query template from a group of query templates. In some cases, some of the query templates can correspond to other queries associated with users of different tenants and can be generated by replacing user query parameters with placeholders. The system can identify query parameters for the placeholders and cause a user interface to display the query template with the query parameters in place of the placeholders.