\documentclass[10pt,a4paper]{article} % Packages \usepackage{fancyhdr} % For header and footer \usepackage{multicol} % Allows multicols in tables \usepackage{tabularx} % Intelligent column widths \usepackage{tabulary} % Used in header and footer \usepackage{hhline} % Border under tables \usepackage{graphicx} % For images \usepackage{xcolor} % For hex colours %\usepackage[utf8x]{inputenc} % For unicode character support \usepackage[T1]{fontenc} % Without this we get weird character replacements \usepackage{colortbl} % For coloured tables \usepackage{setspace} % For line height \usepackage{lastpage} % Needed for total page number \usepackage{seqsplit} % Splits long words. %\usepackage{opensans} % Can't make this work so far. Shame. Would be lovely. \usepackage[normalem]{ulem} % For underlining links % Most of the following are not required for the majority % of cheat sheets but are needed for some symbol support. \usepackage{amsmath} % Symbols \usepackage{MnSymbol} % Symbols \usepackage{wasysym} % Symbols %\usepackage[english,german,french,spanish,italian]{babel} % Languages % Document Info \author{Allyed} \pdfinfo{ /Title (kql.pdf) /Creator (Cheatography) /Author (Allyed) /Subject (KQL Cheat Sheet) } % Lengths and widths \addtolength{\textwidth}{6cm} \addtolength{\textheight}{-1cm} \addtolength{\hoffset}{-3cm} \addtolength{\voffset}{-2cm} \setlength{\tabcolsep}{0.2cm} % Space between columns \setlength{\headsep}{-12pt} % Reduce space between header and content \setlength{\headheight}{85pt} % If less, LaTeX automatically increases it \renewcommand{\footrulewidth}{0pt} % Remove footer line \renewcommand{\headrulewidth}{0pt} % Remove header line \renewcommand{\seqinsert}{\ifmmode\allowbreak\else\-\fi} % Hyphens in seqsplit % This two commands together give roughly % the right line height in the tables \renewcommand{\arraystretch}{1.3} \onehalfspacing % Commands \newcommand{\SetRowColor}[1]{\noalign{\gdef\RowColorName{#1}}\rowcolor{\RowColorName}} % Shortcut for row colour \newcommand{\mymulticolumn}[3]{\multicolumn{#1}{>{\columncolor{\RowColorName}}#2}{#3}} % For coloured multi-cols \newcolumntype{x}[1]{>{\raggedright}p{#1}} % New column types for ragged-right paragraph columns \newcommand{\tn}{\tabularnewline} % Required as custom column type in use % Font and Colours \definecolor{HeadBackground}{HTML}{333333} \definecolor{FootBackground}{HTML}{666666} \definecolor{TextColor}{HTML}{333333} \definecolor{DarkBackground}{HTML}{39C2D7} \definecolor{LightBackground}{HTML}{F2FBFC} \renewcommand{\familydefault}{\sfdefault} \color{TextColor} % Header and Footer \pagestyle{fancy} \fancyhead{} % Set header to blank \fancyfoot{} % Set footer to blank \fancyhead[L]{ \noindent \begin{multicols}{3} \begin{tabulary}{5.8cm}{C} \SetRowColor{DarkBackground} \vspace{-7pt} {\parbox{\dimexpr\textwidth-2\fboxsep\relax}{\noindent \hspace*{-6pt}\includegraphics[width=5.8cm]{/web/www.cheatography.com/public/images/cheatography_logo.pdf}} } \end{tabulary} \columnbreak \begin{tabulary}{11cm}{L} \vspace{-2pt}\large{\bf{\textcolor{DarkBackground}{\textrm{KQL Cheat Sheet}}}} \\ \normalsize{by \textcolor{DarkBackground}{Allyed} via \textcolor{DarkBackground}{\uline{cheatography.com/175558/cs/36841/}}} \end{tabulary} \end{multicols}} \fancyfoot[L]{ \footnotesize \noindent \begin{multicols}{3} \begin{tabulary}{5.8cm}{LL} \SetRowColor{FootBackground} \mymulticolumn{2}{p{5.377cm}}{\bf\textcolor{white}{Cheatographer}} \\ \vspace{-2pt}Allyed \\ \uline{cheatography.com/allyed} \\ \end{tabulary} \vfill \columnbreak \begin{tabulary}{5.8cm}{L} \SetRowColor{FootBackground} \mymulticolumn{1}{p{5.377cm}}{\bf\textcolor{white}{Cheat Sheet}} \\ \vspace{-2pt}Not Yet Published.\\ Updated 1st February, 2023.\\ Page {\thepage} of \pageref{LastPage}. \end{tabulary} \vfill \columnbreak \begin{tabulary}{5.8cm}{L} \SetRowColor{FootBackground} \mymulticolumn{1}{p{5.377cm}}{\bf\textcolor{white}{Sponsor}} \\ \SetRowColor{white} \vspace{-5pt} %\includegraphics[width=48px,height=48px]{dave.jpeg} Measure your website readability!\\ www.readability-score.com \end{tabulary} \end{multicols}} \begin{document} \raggedright \raggedcolumns % Set font size to small. Switch to any value % from this page to resize cheat sheet text: % www.emerson.emory.edu/services/latex/latex_169.html \footnotesize % Small font. \begin{multicols*}{3} \begin{tabularx}{5.377cm}{x{2.4885 cm} x{2.4885 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Field Serach}} \tn % Row 0 \SetRowColor{LightBackground} {\bf{Field Serach}}, e.g. component : app & Will return results that contain 'app' under the field named 'component'. \tn % Row Count 4 (+ 4) % Row 1 \SetRowColor{white} {\bf{Field and Term OR}}, e.g. component : (app or solr) & Returns results containing either 'app' OR 'solr' under the field named 'component'. \tn % Row Count 9 (+ 5) % Row 2 \SetRowColor{LightBackground} {\bf{Field and Term AND}}, e.g component : (app and solr) & Returns results containing 'app' AND 'solr' under the field named 'component'. \tn % Row Count 13 (+ 4) % Row 3 \SetRowColor{white} {\bf{Exact Phrase Match}}, e.g. component : "solr dict 8" & Returns results where the words 'solr dict 8' are presented together under the field named 'component'. \tn % Row Count 19 (+ 6) % Row 4 \SetRowColor{LightBackground} {\bf{Field Existance}}, e.g. component :* AND NOT component : app & Returns results with the field named 'component' but does not include results where the value 'app' exists. \tn % Row Count 25 (+ 6) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{2.4885 cm} x{2.4885 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Examples}} \tn % Row 0 \SetRowColor{LightBackground} Gather all logs sent by GA App & component : app \tn % Row Count 2 (+ 2) % Row 1 \SetRowColor{white} Gather all logs from GA App where the response wasn't 200 & component : app and not responseCode : "200" \tn % Row Count 5 (+ 3) % Row 2 \SetRowColor{LightBackground} Gather all logs where the log level is ERROR & level : ERROR \tn % Row Count 8 (+ 3) % Row 3 \SetRowColor{white} Gather logs from a specific file & Source : "/logs/fuse.log" \tn % Row Count 10 (+ 2) % Row 4 \SetRowColor{LightBackground} Gather logs related to a specific correlation ID & correlationId : \seqsplit{"5b1231cb-2e1d-4ae4-9d08-57ae8523ae2c"} \tn % Row Count 13 (+ 3) % Row 5 \SetRowColor{white} Get an error log which didn't have a successful response code with a correlationId starting with '5b' or '4c' from the GA App & component : app and level : ERROR and not responseCode : "200" and correlationId : (5b* or 4c*) \tn % Row Count 20 (+ 7) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{2.4885 cm} x{2.4885 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Term Search}} \tn % Row 0 \SetRowColor{LightBackground} {\bf{Keywords}}, e.g. Host Error & Will return results containing the words 'Host' and/or 'Error'. \tn % Row Count 4 (+ 4) % Row 1 \SetRowColor{white} {\bf{Phrases}}, e.g "Host Error" & Returns results where the words 'Host Error' are present together. \tn % Row Count 8 (+ 4) % Row 2 \SetRowColor{LightBackground} {\bf{OR Keyword}}, e.g. Host OR Error & Returns results where either the words 'Host' {\bf{or}} 'Error' are present. \tn % Row Count 12 (+ 4) % Row 3 \SetRowColor{white} {\bf{AND Keyword}}, e.g. Host AND Error & Returns results where the words 'Host' {\bf{and}} 'Error' are both present. \tn % Row Count 16 (+ 4) % Row 4 \SetRowColor{LightBackground} {\bf{Wildcard *}}, e.g. compo* : app or component : ap* & Asterisks are the only supported wildcards as of now, they can be used both in field names or in term values. \tn % Row Count 22 (+ 6) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{5.377cm}{x{2.4885 cm} x{2.4885 cm} } \SetRowColor{DarkBackground} \mymulticolumn{2}{x{5.377cm}}{\bf\textcolor{white}{Range Search}} \tn % Row 0 \SetRowColor{LightBackground} {\bf{Inclusive Range}}, e.g. {[}200 to 300{]} & Returns all values within the specified range including 200 and 300. \tn % Row Count 4 (+ 4) % Row 1 \SetRowColor{white} {\bf{Exclusive Range}}, e.g. \{200 to 300\} & Returns all values within the specified range excluding 200 and 300. \tn % Row Count 8 (+ 4) % Row 2 \SetRowColor{LightBackground} {\bf{Mathematical Equations}}, e.g. message\_size\textbackslash{}(in Byte\textbackslash{}) \textgreater{}= 200 & Returns any log where the 'message\_size\textbackslash{}(in Byte\textbackslash{})' field's value is greater than or equals 200 (works with \textless{},\textgreater{},\textless{}=,\textgreater{}=) \tn % Row Count 14 (+ 6) \hhline{>{\arrayrulecolor{DarkBackground}}--} \end{tabularx} \par\addvspace{1.3em} % That's all folks \end{multicols*} \end{document}