Understand Session versus Saved Searches

Select Search.

As you initiate searches, Search automatically preserves your activity in case you must navigate to another search or to a different feature in the ArcSight Platform. Search temporarily maintains these session searches in tabs until you close the search tabs, exit your browser, or log out. The Home tab lists all your current session searches. Therefore, if you close the search tabs or lose the search tabs by logging out, you can open them again from the Home tab.

Saved Searches

For long-term use of a search, you must save the query, criteria, or results. You can review and manage your saved searches at any time:

 

Expired Searches

Session and saved searches usually expire after a specified amount of time. When they expire, the system deletes all information about the search. If this occurs when you have the search open in a tab, you will receive a notification that the search has expired and be instructed to close the tab.

Because session searches are considered short-term or temporary searches, the default expiration time is after 24 hours of inactivity. Saved searches expire after seven days by default. You can reset the expiration time by running the search again or by modifying the query or criteria. However, if the search has already expired, you cannot reset the expiration clock.

You can also override the default expiration time by changing the Search expires in setting for a particular session or saved search.