Any plan to regroup inside a single query box, the search, visualize and vrl input?
imho, that's the usual norm using pipe with tools like splunk, sentinel, sumologic...
it's annoying if not confusing to switch between those each time (especially search and visualize with a confirmation box that has no option to "not ask again")
It would make query sharing easier with a single "code" to copy/paste, especially as only url sharing is offered which is not portable between instances.
something like

SQL query
| vrl code
| visualize code

Already what's happening under the hood I believe (can apply vrl on sql output but not sql on vrl).
A good addition would be to be able to aggregate after an inline vrl too.
Thanks