The Search Dashboard page displays your running and completed searches. Each search has a Search ID (search + server ID) that can later be modified for an easier finding. Saved search results (once loaded) will also be shown on this page along with their unique identifier name. For further details, see Persisting Search Results .
Search widgets (Filters, Saved Searches, Fieldsets, Lookup Files, and Peers) are located at the top of the page and display the total number of items for each category stored in your Logger. To view a results table with specific details for each of the search types, click the corresponding widget.
To view an Active Search:
Go to Analyze > Search Dashboard. A series of search details (Time Range, Execution Start Time, Local Only, Time Type, Hits, Scanned, Status, and expiration time) will be displayed for each of the active searches. If no active searches are running, the search dashboard page will be empty.
To rename the search (except the search results loaded), double click the tab and add a unique name. Click outside the title box or press enter to save the changes.
You can also access the Search Dashboard from the Search page. Click the
icon to open a specific search or the Search Dashboard.
To create a new search, click the
icon. See Running a Search for further details.
Delete an active search
Click the
. The search will be removed from the list.
Other considerations:
To modify the maximum number of active searches displayed in this page, go to Configuration > Search Options > Max Concurrent Searches.
The expiration time is reset whenever there is a request for fetching events, for example:
A page update in the search result table.
A drill down by clicking the histogram.
A search opened from the search dashboard page.