Scheduled Searches

A Scheduled Search is a standard Log Search that you save and execute to run on a schedule. Once configured, scheduled searches run continuously, making them a great tool for continuously monitoring your stack.

Create a Scheduled Search

Learn how to add alerts and schedule search to run it at a regular scheduled time.

Create a Scheduled Search Email Alert

Learn how to create a scheduled search email alert.

Edit or Cancel a Scheduled Search

Learn how to edit or cancel a scheduled search at any time.

Save to Index

Learn how to save the results to an index after creating a scheduled search email alert.

Save to Lookup

Learn how to save the results of a scheduled search to a lookup table.

Generate Cloud SIEM Signals with a Scheduled Search

Learn how to create a scheduled search that will trigger a Cloud SIEM Signal.

FAQ

Review frequently asked questions about scheduled searches and troubleshooting tips.