Skip to main content
Sumo Logic

Editing a Scheduled Search

When you try to edit a scheduled search query, add a schedule to a saved search, or edit a saved search's schedule, Sumo compares your search filter to the search filter currently associated with the scheduled search.

By default, a scheduled search runs in the context of the search creator. In other words, when the dashboard is shared with other users, the search creator's role access filter governs what data is returned by the search. 

When you try to edit a scheduled search query, add a schedule to a saved search, or edit a saved search's schedule, Sumo compares your search filter to the search filter currently associated with the scheduled search.

If the search filters match, you can perform the edit. Otherwise, a "Cannot Edit Scheduled Search" message is presented:

connot-edit-scheduled-search.png

You can either:

  • Change the Data Access Level.  You can set the data access level to your own. As a result the scheduled search will run with your role search filter applied.  

  • Duplicate. You can make a copy of the scheduled search, and then edit as desired.