
Saving searches
When you create a search, you have several options to choose from to save the search. In the Search app, the choices are listed under the Save As drop-down.
Save as option | Description | More information |
---|---|---|
Report | When you create a search that you would like to run again, you can save the search as a report. | See Create and edit reports in the Reporting Manual. |
Dashboard panel | You can also save a search as a dashboard panel. Dashboards can have one or more panels which can show search results in tables or in graphical visualizations. | See Getting started in the Dashboards and Visualizations manual. |
Alert | Some searches provide timely information that you want to be notified about. You can save a search as an alert. An alert is an action that a saved search triggers, based on the results of the search. The action might be to send an email or run a script. | See About alerts in the Alerting Manual. |
Event type | You can save a search as an event type. Event types are a categorization system to help you make sense of your data. Event types let you sift through huge amounts of data, find similar patterns, and create alerts and reports. | See About event types in the Knowledge Manager Manual. |
See Also
PREVIOUS Manage Splunk Enterprise jobs from the OS |
NEXT Scheduling searches |
This documentation applies to the following versions of Splunk Cloud™: 7.0.13, 7.2.4, 7.2.6, 7.2.7, 7.2.8, 7.2.9, 7.2.10, 8.0.2006, 8.0.2007, 8.1.2008, 8.1.2009, 8.1.2011, 8.1.2012 (latest FedRAMP release), 8.1.2101
Feedback submitted, thanks!