$vt_dummy
The $vt_dummy virtual table generates dummy events.
// returns 10 dummy events
dataset="$vt_dummy" event<10Purpose
Use $vt_dummy to test your queries with dummy data.
The event predicate lets you specify the number of events, and the second predicate lets you simulate a long-running
query. Using both lets you simulate a burst of events over a specific time range.
Permissions
All types of Search Members can use the $vt_dummy virtual table.
Syntax
dataset="$vt_dummy" event<5 second<3Parameters
| Name | Type | Required | Description |
|---|---|---|---|
NumberOfEvents | int | No | The number of events to generate. If used together with SearchRuntime, generates the NumberOfEvents per second, over the course of the SearchRuntime.If not specified, generates one event. |
SearchRuntime | int | No | The desired runtime of the simulated search, in seconds. |
Returns
Returns dummy events according to the specified criteria. Each event contains the following fields:
| Field | Description |
|---|---|
_time | The event’s timestamp. |
event | The event’s ordinal number. |
Examples
Generate one dummy event, with an additional field foo set to 42.
dataset="$vt_dummy"
| extend foo=42Generate five dummy events.
dataset="$vt_dummy" event<5Generate one event per second, over the course of 10 seconds.
dataset="$vt_dummy" second<10Generate three events per second, over the course of 10 seconds.
dataset="$vt_dummy" event<3 and second<10