After performing one or more search operations, you can choose to manage your searches. For example, you can save or delete one or more of your searches.
Before You Begin
You must perform a search operation. For instructions, see Searching Log Data in the Log Monitoring Application.
Procedure
The following table lists the operations to manage your searches from the Search page.
Operation
|
Instructions
|
Delete recent searches
|
Above the Time Line chart, click Show History. In the Recent Search table, hover over a search name, and then click Delete .
The search is removed from the Recent Search table.
|
Delete saved searches
|
-
Choose one of the following approaches:
-
If you are currently viewing the saved search information that you want to delete, go to the upper right side of the Search page and click Actions > Delete Search.
-
If you want to look for the saved search that you want to delete, then above the Time Line chart, click Show History. In the Saved Search table, hover over the saved search name, and then click Delete .
After you choose to delete the saved search, a message appears that asks if you are sure that you want to remove the search.
-
Click Yes.
The search is removed from the Saved Search table. If the saved search was added to a dashboard, it is also removed from the dashboard.
|
Download search results
|
You can download the search results as a text file or a CSV file.
-
To save as a text file, click Save to Textat the top of the Event Log table. The search results are saved as a .log file in plain text format.
-
To save as a CSV file, click Save to CSVat the top of the Event Log table. The search results are saved as a .CSV file.
|
View saved, recent, and shared searches
|
Below the search bar, click Show History to view the Recent Search, Saved Search, and Shared Search tables.
Click the name of the search that you want to view from the respective table.
The Search page reloads to show the search results.
|
Edit the searches
|
To edit a saved search, complete the following steps:
-
Go to the upper right side of the Search page, and then click Actions > Edit Search.
-
Make the necessary changes
-
Click Actions > Save Changes to save the changes.
You can click Actions > Cancel to cancel the changes.
|
Create a report for a search
|
To create a report for a search, complete the following steps:
-
Go to the upper right side of the Search page, and then click Actions > Visualize.
The report page appears with the facets that are available in the Search page along with any filters applied created as ad-hoc data set under the Data Sets list.
-
Select the data in the ad-hoc data set to create the report.
For more information, see Building and Deploying Reports.
|
Managing Shared Searches