Understand the Search Criteria

The search criteria defines the parameters of your search: the time range in which to find data and the fieldsets that you want to use for displaying the results. Search provides system searches with specific criteria that you can view and load, such as DoS Events, MITRE ATT&CK Events, and Failed Login Event.

You can also save your search criteria for future use, such as loading the criteria into another search. However, you must have the required permissions for saving search criteria. For example, you must have the Manage Search Criteria permission to save criteria such as fieldsets. You have the option to clone, modify, or remove a saved criteria at any time.