Viewing and Managing Your Searches

The dataset for your search results reflect events that match the search query and criteria settings that you specify. Search displays the results in an Events Histogram, Results Table, and Event Inspector. You can save the queries, parameter sets, and results datasets for future use.

If the connectors are configured to send raw events, the table and inspector panel can include raw event data. Also, the maximum number of events that a search can return is 10 million, but you can specify a preferred search results limit. If your searches regularly stop at the maximum limit, consider splitting the query into separate searches. Alternatively, you can refine the results by adding an operator such as where to the query.

You can export the search results to a .csv file or export a single result to a .pdf file.