Client-side sort for live query results

[fleetdm]

Client-side sort for live query results

[noahtalerman]

Currently, when a user elects to run a live query, the Fleet UI presents a user with a table of the results. This table can be filtered by the text content of each column.

Problems

1. The current Fleet UI doesn't help the user group the data in live query results. Grouping query result data is a key part of the analysis. For example, a user may want to group the query results by username in order to see if a user exists only on a specific host (check for outliers).

2. The current Fleet UI doesn't paginate live query results. This means that at some point (large sets of data), the browser is no longer able to render the live query results.

Goals

1. Allow users to group live query results so they can aggregate data across hosts.
2. Prevent "bringing the browser to its knees" when the live query result set is extremely large.

Possible solutions

Goal 1:

• Allow users to group live query results within the Fleet UI. Possible implementations include: saving the live query result data to the MySQL database and performing addition sorting capabilities on those tables, grouping the data client-side

Goal 2:

• Provide a warning overlay when live query result set gets huge.

Current workarounds

• The Fleet UI currently allows users to export live query results to a CSV file. Users can import this file into an Excel (Google Sheets) spreadsheet and perform grouping/sorting.
• Utilize fleetctl and Unix tooling to pass the live query result data to another location file and then perform grouping/sorting.

[noahtalerman]

This issue is now a duplicate. The improvement described in this issue is now covered by the following issue: #4572