- Get Started with Threat Center
- Threat Center
- Threat Center Permissions
- Threat Center Alerts: Read
- Threat Center Alerts: Read, Write, and Delete
- Threat Center Cases: Read
- Threat Center Cases: Read, Write, and Delete
- Threat Center Detection Grouping Rules: Read
- Threat Center Detection Grouping Rules: Read, Write, and Delete
- Threat Center Watchlist: Read
- Threat Center Watchlist: Read, Write, and Delete
- Threat Center Cases
- Threat Center Alerts
- Threat Center Detections
- Threat Center Risk Score
- Configure Threat Center
- Monitor Entities of Interest in Threat Center
- Work on Cases
- Work on Alerts
- Edit and Collaborate in Threat Center
- Use Automation Tools in Threat Center
- Find Cases and Alerts
- View Case and Alert Metrics
- Get Notified About Threat Center
- Threat Center APIs
Saved Searches in Threat Center
If you frequently run the same search in Threat Center, save the search.
After you create a new saved search, you can run, edit, and delete it.
To navigate to your saved searches for cases or alerts, navigate to the respective tabs for Cases or Alerts, then click Searches.
Under Saved Searches, view a list of all the searches you've saved and public searches other users in your environment have saved:
Title – The title and description of the saved search.
Query – The query of the saved search.
Time Range – The time range that the saved search covers.
Creator – The person who created the saved search.
Last Modified – The date and time the saved search was last modified.
If the saved search is visible only to you, it is marked as Private
. If the saved search is publicly runnable, editable, and deletable, it is marked as Public 
.
To quickly find a saved search, you can search and sort the list of saved searches.
Create a New Saved Search in Threat Center
If you frequently run the same search, create a new saved search.
There is no limit to how many searches you can save.
Run a search: build a search, type a search in Exabeam Query Language or natural language, run a saved search, or run a recent search.
Click Save.
In Search Title, enter a unique title for the search.
(Optional) In Description, describe the search.
Set the visibility of the saved search:
To make the saved search visible only to you, toggle Make search private on.
To make the saved search publicly visible, editable, and deletable, toggle Make search private off.
Click Save.
Run a Saved Search in Threat Center
After you save a search, you can run it. Only you can view and run searches you saved.
Depending on whether you're searching for cases or alerts, navigate to to the Cases or Alerts tab, then click Searches.
In Saved Searches, select a saved search from the list. The search query applies to the search bar.
Click Search
.
Edit a Saved Search in Threat Center
Change the title, description, and visibility of a saved search.
You can't change the query of a saved search.
Depending on whether you're editing a saved search for cases or alerts, navigate to the Cases orAlerts tab, then click Searches.
For a saved search you're editing, click the More
menu, then select Edit.Change the title, description, or visibility of the saved search:
In Search Title, enter a unique title for the search.
(Optional) In Description, describe the search.
Set the visibility of the saved search:
To make the saved search visible only to you, toggle Make search private on.
To make the saved search publicly visible, editable, and deletable, toggle Make search private off.
Click Save.
Delete a Saved Search in Threat Center
Delete a saved search you no longer need.
Depending on whether you're deleting a saved search for cases or alerts, navigate to the Cases or Alerts tab, then click Searches.
For a saved search you're deleting, click the More
menu, then select Delete.
Search Saved Searches in Threat Center
To quickly find saved searches of interest, search the list of saved searches.
You can search for the Title, Query, and Creator of a saved search.
To search for a saved search of interest, under Searches > Saved Searches, enter a query in Type to search.
Sort Saved Searches in Threat Center
To quickly find saved searches of interest, organize the list of saved searches by certain attributes.
You can sort saved searches by the Title, Creator, and Last Modified columns.
To sort saved searches by a column, select the column header. To toggle between ascending and descending order, click the column header again.