> ## Documentation Index
> Fetch the complete documentation index at: https://trickest.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Querying

> Filter Live Table data using the Trickest Query Language.

## Overview

The **Query** tab lets you write and run filters against any Live Table. Queries use the Trickest Query Language, a concise syntax built for filtering large structured datasets with exact matches, comparisons, regex patterns, and logical operators.

## Writing a Query

Open a Live Table and click the **Query** tab. Click **New Query** to create a query, then type your filter in the text editor that opens.

### Operators

| Operator | Description                  | Applicable types             |
| -------- | ---------------------------- | ---------------------------- |
| `=`      | Exact match                  | Strings, numbers, dates, IPs |
| `!=`     | Does not match               | Strings, numbers, dates, IPs |
| `>`      | Greater than                 | Numbers, dates               |
| `<`      | Less than                    | Numbers, dates               |
| `~`      | Matches regex pattern        | Strings                      |
| `!~`     | Does not match regex pattern | Strings                      |
| `AND`    | Both conditions must be true |                              |
| `OR`     | Either condition can be true |                              |

### Basic examples

Exact value:

```text theme={null}
status_code = 200
```

Numeric comparison:

```text theme={null}
response_time > 1000
```

Exclude a value:

```text theme={null}
port != 80
```

Regex match:

```text theme={null}
hostname ~ ".*staging.*"
```

Multiple conditions:

```text theme={null}
port = 22 AND banner ~ "OpenSSH" AND last_seen > "2024-01-01"
```

<Note>
  Quote strings and dates. Leave numbers unquoted. When using regex, escape special characters with a backslash (e.g., use `\\.` to match a literal period).
</Note>

## Grouping Conditions with Parentheses

Use parentheses to control how `AND` and `OR` are evaluated when combining multiple conditions:

```text theme={null}
(port = 80 OR port = 443) AND status_code = 200
```

```text theme={null}
(severity = "critical" AND status = "open") OR (severity = "high" AND last_seen > "2024-01-01")
```

<Warning>
  Nested parentheses are not supported. Each group must be a flat list of conditions joined by a single logical operator.

  Valid:

  ```text theme={null}
  (cond1 AND cond2) OR (cond3 AND cond4)
  ```

  Invalid:

  ```text theme={null}
  ((cond1 AND cond2) OR cond3) AND cond4
  ```
</Warning>

## Running a Query

Click **Run** to execute the query against the current Live Table. Results are displayed in the table below the editor. The row count updates to reflect how many records match your filter.

To clear the filter and return to the full table, remove the query text and run again.

### Selecting a dataset and columns

Two dropdowns sit next to the **Run** button:

* **Live Table** — selects which Live Table in the current database to query. Switch between tables without leaving the Query tab.
* **Columns** — toggles which columns are visible in the results. Use this to focus on the fields relevant to your current filter. This does not affect the underlying data or other team members' views.

## Tips

* **Start broad, then refine.** Begin with a single condition and add more until you isolate exactly what you need.
* **Use parentheses for mixed logic.** When combining `AND` and `OR`, always use parentheses to make evaluation order explicit.

## Next Steps

<CardGroup cols={2}>
  <Card title="Creating Views" icon="table-columns" href="./creating-views">
    Save queries and column layouts as named views for quick reuse.
  </Card>

  <Card title="Exporting" icon="arrow-up-from-bracket" href="./exporting">
    Download filtered results for use in external tools and reports.
  </Card>
</CardGroup>