Running Searches

During the time that a search is running or has not yet expired or been deleted, you can see the details of the search query (but not the search results) from the Running Searches page.

The running searches page displays the following search types:

A manual search on local or peer Logger (Analyze > Classic Search). See Classic Search: Running a Search.
A scheduled search (Configuration > Search > Scheduled Searches/Alerts). See Scheduled Searches/Alerts.
A saved search alert (Configuration > Search > Saved Searches). See Saved Searches
A search export, with the “Rerun query” option checked (Analyze > Classic Search > Export Results)

This page can be helpful in determining if there is a problem, for example:

A search is not responding
A search is taking too long to run
A search is slowing the overall Logger performance
When there are too many concurrent searches still in memory.

Prerequisites

You must have admin user privileges to end a running search process. See Setting Logger User Permissions for more information on Logger user rights and how to administer them.

To view the Running Searches page:

Click Configure > Search > Running Searches.

Running Searches List

The list shows the session ID, user who started the tasks, the date and time that the task started, the number of hits, the number of scanned events, the elapsed time, the query, the run status, and a delete icon .

To view the currently running searches:

Open the Configuration > Search menu and click Running Searches.
Any searches that are currently running are displayed.

To end a currently running search:

Open the Configuration > Search menu and click Running Searches.
To end a search process, click the icon for the task.