Run a Search

When you run a search, Search begins populating the Events histogram and Events table. Depending on the number of events retrieved, the search might pause to indicate that the amount of data could impact the search performance. You might want to select a smaller time range. To resume a search, click the play button in the progress bar.

 

1. Create or load the search that you want to run.

2. Click Search.

3. (Optional) To more easily find this search later, give the search a name.

4. (Optional) To save the query, criteria, or search results for future use, select the Save icon.

5. Click the pause or stop icons if you need to interrupt the search. Click the resume icon to continue the search.