Understand the Search Criteria

You must have the Manage Search Criteria permission.

The search criteria defines the settings for your search, the time range in which to find data and the fieldsets that you want to use for displaying the results. Search provides Understand the System Searches that you can view and load, such as DoS Events, MITRE ATT&CK Events, and Failed Login Event.

You can also save your search criteria for future use, such as loading the criteria into another search. You have the option to clone, modify, or remove a saved criteria at any time.