Reusing recent searches in Data Explorer

You can run and edit a recent search queries. Recent searches allow security analysts to share and reuse search queries, saving time and effort.

1. Go to Data Explorer > Search > Recent searches.
2. Click the table or card view icon to view recent searches in either card view (default) or the table view.
3. Click the search bar to filter the recent searches by your selected criteria.
   • Creation date
   • Completed results
   • Search
   • Start time
   • Stop time
   • Size
4. In the card view, you can take the following actions for a recent search.
   • Click query status to inspect the status details.
   • Click the Edit query icon to edit the selected query to create a new search.
   • Click options to take advanced actions.

     Option	Description
     Delete	Delete the search.
     Save search	Save this search for future use. For more information, see Creating and reusing saved searches in Data Explorer

5. In the table view, you can take the following actions for a recent search.
   • Click the column header to sort the list.
   • Click the Expand row icon to view the query details and copy the query.
   • Click options to take advanced actions.

     Option	Description
     Save search	Save this search for future use. For more information, see Creating and reusing saved searches in Data Explorer
     Duplicate	Duplicate this search.
     Delete	Delete this search.