You can save any VQL queries as a favorite for easy and quick access later.
You can load and save favorites from the Editmenu or the VQL editor's context menu. Simply use the Load from Favorites or Save to Favorites menu items available in those menus at any time while in the VQL editor.
Depending on whether there is a text selection or not, either the whole content of the code area or only the selected text will be saved as a favorite.
Ideally complete statements should be selected and saved as favorites, but it is possible to save incomplete statements as well if desired. Incomplete favorites do need to be closed after being loaded to form a valid statement that can be executed correctly.
When saving a query to Favorites, a number of properties can be set to catalog, sort and find favorites later.
Favorites can also be edited later if changes are needed (see below for editing existing favorites).
Name
Name of the favorite.
Category
Select a category for your favorite. Your favorite query will be grouped together with other favorites under the same category.
Query type
Enter or select a query type.
Object type
Enter the object type used in this query.
Show in Favorites
Select if you want the favorite to be displayed in the Favorites menu. Unchecking this will hide the favorite from the Favorites menu and the Favorites Panel in the Vault Navigator.
Show in Vaults
Enter any vaults this particular favorite should be limited to.
An exclamation mark placed in front of the vault name (e.g. !testVault.domain.com) hides the favorite for the respective vault.
Leaving the field empty will display the favorite in all vaults.
Vaults can also be selected by opening the menu to the right of this field, but only known (previously used) vaults will be displayed in the list.
Description
Enter an (optional) description of what this favorite does.
VQL Query
Displays the VQL query for this favorite.
Manage Favorites
The Manage Favorites window allows favorites to be edited, deleted, searched, as well as exported/imported to/from external files (for sharing favorites with others for example).
Favorites can be searched/filtered, using the various properties at the bottom of the window. Any propertyperforms a full text search in all available properties. All queries that match the filter criteria are displayed in the center of the window.
The toolbar buttons perform the following actions on the selected favorite(s):
Edit opens the selected favorite for editing (this can also be done by double-clicking a favorite from the list).
Deletes the selected favorite.
It is not possible to restore a deleted favorite, so take care when using this action.
Export to File exports all selected favorites to a file.
Import from File imports favorites from a file.
The Manage Favorites window can be accessed from the by right-clicking and selecting the Manage Favorites item from its context menu.
