Build a Report Using Search Results

Search assigns a unique Search Results ID, which is a link to the temporary table containing the dataset that you see in the Events table and in the saved Search Results.

• You can copy the ID to build a report around those events.
• You can also build a report based on the Search Results ID for a completed run of a scheduled search.

To copy the Search Results ID for a report:

1. View the search results dataset that you want to use in the report.
2. To get the Search ID, click the Copy icon in the table’s header.
3. (Optional) To view or save the copied ID, paste the ID in a text editor.
4. In the Reports Portal, complete the steps for building a dashboard or report based on the dataset.