Saving search criteria in IBM QRadar Risk Manager

Create a search by specifying search criteria, and save the search for future use.

Procedure

  1. Click the Risks tab.
  2. From the navigation menu, click Connections.
  3. Perform a search, and click Save Criteria.
  4. Configure values for the following parameters:
    Option Description
    Search Name Type a name that you want to assign to this search criteria.
    Assign Search to Group(s) The group that you want to assign to this saved search. If you do not select a group, this saved search is assigned to the Other group by default.
    Timespan options

    Choose one of the following options:

    Recent - Specify the time range that you want to filter.

    Specific Interval - Specify the date and time range that you want to filter.
    Include in my Quick Searches If you want to include this search in your Quick Search items, which is available from the Search list, select the checkbox.
    Include in my Dashboard

    If you want to include the data from your saved search in your Dashboard, select the checkbox.

    This parameter is only displayed if the search is grouped.
    Set as Default If you want to set this search as your default search, select the checkbox.
    Share with Everyone If you want to share these search requirements with all other IBM QRadar Risk Manager users, select the checkbox.
  5. Click OK.

What to do next

Refining search results by using a subsearch