Skip to main content

Is there currently any way to stop a long-running or ongoing query in SIEM Search?

I’ve encountered situations where a query takes too long or was triggered unintentionally, but I couldn't find a way to cancel it once it's in progress.

 

I had submitted a feature request for this in the past as well:
https://issuetracker.google.com/issues/379219679

 

If anyone has found a workaround or solution, please do share. It would be really helpful.

Thanks in advance!

Hello 

 

Not beside just closing your tab and reopening.   There’s been a couple tickets put in for this to add a cancel button or definitive option for the end user to know that the search was cancelled. 


Hello 

 

Not beside just closing your tab and reopening.   There’s been a couple tickets put in for this to add a cancel button or definitive option for the end user to know that the search was cancelled. 

Yes, closing tab actually don't help. In history still the query in running state. There must be stop button, it will help alot. It can save unnecessary processing.