Saved Searches
Security Data Lake provides saved search functionality to allow for easy access to previous search criteria. For example, if you frequently need to search through web requests made the day before, then you may benefit from saving this search rather than entering the criteria each time. You can also use saved searches as a building block for dashboards.
Create and Manage Saved Searches
You can save a search via the Search page:
Enter and submit your search.
Click on the Save button on the right side of the search bar.
Enter a unique title for the search.
Click Create new.
To locate a previously saved search, click the Load button and select the saved search from the list as seen below. You can also delete a saved search through this dialog box.
To update a previously saved search:
Click Load and select the desired saved search from the list.
Edit the search results. You may add new fields for a message table, add new widgets, or define a different search query.
Click Save.
You may change the search title through this dialog box and also click the Save as button to create a new saved search without modifying the original saved search.
Note
The shortcut alt-space shows suggestions for a query input. When the input is empty, this shortcut shows query history suggestions. If you already have an input, use alt-shift-h to prompt suggestions. For information about other shortcuts, refer to Keyboard Shortcuts.