Connect Scripts to Linked Queries

The idea behind linked queries to be able to use the list of endpoints from one query in another query. The same can be done with scripts. This section describes how to use the Orbital user interface to connect scripts to linked queries.

Connect Scripts to Linked Queries from the Investigate Page

To connect a script to one or more linked queries from the Investigate page:

  1. Click Investigate to display the Investigate page.

  2. Click Link Queries to show existing queries.

  3. Note: The Existing Queries dropdown will display the last 50 existing queries. If you wish to select one or more queries that are older than the 50 listed in this dropdown, you will have to use the Results page.
  4. Navigate to the query you want to use.

  5. Select the check box next to the query name.

  6. Note: You can select more than one existing query by clicking on multiple check boxes.
  7. Click Add to populate the Endpoints field with all of the endpoints used by the query.

  8. You can either write your own scripts in the Custom Script field or select a built-in script from the Catalog.

Refer to Using Scripts for more information on using scripts.

Connect Scripts to Linked Queries from the Results Page

To access linked queries from the Results page:

  1. Click Results to display the Results page.

  2. Scroll to an existing query.

  3. Click the menu icon () to open the action menu.

  4. Select Link Query to populate the Endpoints field with the name of the chosen existing query.

  5. Repeat steps 1 through 4 to add more existing queries to the Endpoint field.

  6. You can either write your own scripts in the Custom Script field or select a built-in script from the Catalog.

Refer to Using Scripts for more information on using scripts.

More Information