diff --git a/src/assets/css/components/components/advancedSearch/codemirror.scss b/src/assets/css/components/components/advancedSearch/codemirror.scss index a09d3149..befb2e96 100644 --- a/src/assets/css/components/components/advancedSearch/codemirror.scss +++ b/src/assets/css/components/components/advancedSearch/codemirror.scss @@ -375,16 +375,15 @@ span.CodeMirror-selectedtext { background: none; } } .hint-title { - margin: 10px 10px 10px 0; - height: 24px; - line-height: 24px; + margin: 7px 0 3px 0 !important; /* 禁止选中 样式 */ background: #fff !important; font-family: NotoSansHans-Medium; - font-size: 14px; + font-size: 12px; color: #333333 !important; letter-spacing: 0; - font-weight: 500; + font-weight: 600 !important; + line-height: 12px; } .cm-s-eclipse span.cm-string-2 { @@ -435,7 +434,7 @@ span.CodeMirror-selectedtext { background: none; } } .cm-variable-2{ - font-weight: bold; + color: #164 !important; } .default-tips-header,.default-tips-title { diff --git a/src/components/advancedSearch/TextMode.vue b/src/components/advancedSearch/TextMode.vue index 9b92492d..68222532 100644 --- a/src/components/advancedSearch/TextMode.vue +++ b/src/components/advancedSearch/TextMode.vue @@ -134,12 +134,13 @@ export default { option = { keyMap: 'sublime', tabSize: 2, // 缩进格式 - theme: 'eclipse', // 主题,对应主题库 JS 需要提前引入 + // theme: 'eclipse', // 主题,对应主题库 JS 需要提前引入 line: true, lineNumbers: false, // 显示行数 indentUnit: 4, // 缩进单位为4 styleActiveLine: true, // 当前行背景高亮 - mode: 'text/x-filter', // HMTL混合模式 + // mode: 'text/x-filter', // HMTL混合模式 + mode: 'sql', // HMTL混合模式 foldGutter: true, lint: true, auto: 'auto', // 自动换行 diff --git a/src/components/advancedSearch/showhint/Hint/HintInfo.vue b/src/components/advancedSearch/showhint/Hint/HintInfo.vue index bcf196b9..cdda4e4f 100644 --- a/src/components/advancedSearch/showhint/Hint/HintInfo.vue +++ b/src/components/advancedSearch/showhint/Hint/HintInfo.vue @@ -3,6 +3,7 @@
You can write queries to retrieve entities, including their basic information, activity levels, network performance, threat events, relationships with other entities, and so on. A query has three basic parts: fields, operators, and values.
[Field + operator + value] keyword [operator(Field)]
- Field - Fields are different types of traffic attributes in the system. Fields include ip, domain, app, and so on.
-Operator - Operators are the foundation of the query. They relate the field to the value and build a query condition. Common operators include =, IN, Like, and so on.
-Value - Values are the actual data in the query.
-Use the percent(%) wildcard substitutes for one or more characters in a string. Such as:
-domain like '%google.com'
- Strings containing spaces must be enclosed in single quotes ('). Such as:
-ip=192.168.10.53
- ip.country='United States'
- Keyword - Keywords are specific words in the query. You can specify the AND and OR to create more complex query conditions. Currently only support AND.
+Use the percent(%) wildcard substitutes for one or more characters in a + string. Such as:
+domain like '%google.com'
+ Strings containing spaces must be enclosed in single quotes ('). Such as:
+ip=192.168.10.53
+ ip.country='United States'
+ Currently only support AND.
+There are two input modes, which can be switched by clicking the button on the right side of the input box.
您可以编写查询来检索实体。查询具有三个基本部分:字段、运算符和值。
[字段 + 运算符 + 值] 关键字 [运算符(字段)]
- 字段 - 字段是系统中不同类型的属性。字段包括 ip、domain、app 等。
-运算符 - 运算符是查询的基础。他们将字段与值相关联并构建查询条件。常见的运算符包括 =、IN、Like 等。
-值 - 值是查询中的实际数据。
-使用百分号(%)通配符替换字符串中的一个或多个字符。例如:
-domain like '%google.com'
- 包含空格的字符串必须用单引号(')括住。例如:
-ip=192.168.10.53
- ip.country='United States'
- 关键字 - 关键字是查询中的特定单词。您可以指定 AND 和 OR 来创建更复杂的查询条件。暂时只支持AND。
+使用百分号(%)通配符替换字符串中的一个或多个字符。例如:
+domain like '%google.com'
+ 包含空格的字符串必须用单引号(')括住。例如:
+ip=192.168.10.53
+ ip.country='United States'
+ 暂时只支持AND。
+有两种输入模式,通过点击输入框右侧的按钮进行切换。