Open topic with navigation

Saved Searches

A saved search, unlike a search filter, recalls a specific query with its time range and fieldset. Saving the time range supports scheduled searches and reports. Fieldsets (using the fieldset text box or drag and drop) allows selecting the specific event fields to display in the results. You can schedule a Saved Search to run at a specific interval or generate an alert. For more information, see Scheduled Searches/Alerts.

The Saved Searches page displays and supports adding, editing, and deleting all saved searches. You can add a saved search here or directly from the Search page.

Saved Search Page

For information on how to save a search from the Search page, see Saving Queries, Creating Saved Searches and Saved Filters.

For information on how to use the saved searches created on this page, see Searching with Saved Queries.

To add a Saved Search:

1. Open the Configuration > Search menu and click Saved Searches.

2. Click Add and enter the following parameters:

   Parameter	Description
   Name	A name for this Saved Search. This name will be used for exported output files, with the Saved Search date and time appended.
   Start Time	Absolute date and time of earliest possible event. Alternatively, check Dynamic to specify the start time relative to the time when the Saved Search job is run.
   End Time	Absolute or Dynamic date and time of latest possible event, as described above.
   Search Time Fields	Select the search time type: Logger Receipt Time or End Time (Event time).
   Query Terms	Enter the query in the text field or select one or more Filters from the list below the text field. When you type a query, Logger’s Search Helper enables you to quickly build a query expression by automatically providing suggestions, possible matches, and applicable operators. See Search Helper for more information.
   Local Search	Check this box to limit the Saved Search to the local Logger box. If the Local Search box is left unchecked, the Saved Search will include all Peer Loggers as well as the local Logger.

3. Click Save to add the new Saved Search, or Cancel to quit.

To edit a Saved Search:

1. Open the Configuration > Search menu and click Saved Searches.
2. Find the Saved Search that you want to edit and click the Edit icon () on that row.
3. Change the information in the form and click Save.

To delete a Saved Search:

1. Open the Configuration > Search menu and click Saved Searches.
2. Find the Saved Search that you want to delete and click the Delete icon () on that row.
3. Confirm the action.

See Also