Skip to main content
Sumo Logic

Tutorial Step 7: Create a Saved Search

Now let’s save the query we created to create a saved search. It will be saved to the Library so you can run the search again later, edit it, or share it.
  1. Go back to the Search page, and the Apache tab.
  2. Under the search query box, click Save As.
  3. The Save Search As dialog displays.
    1. For Search name, enter Apache Status Code Query.
    2. For the Description, it's a best practice to include the operators you have used in the query so you can search later by operator name. Enter a description for the query, and at the end, include used operators. For example, enter Apache Access status codes - trend over time. Operators: transpose, timeslice.
    3. For Time range, select another time range if desired. We’ve left this one as is.
    4. Under Folder, you can select the folder in the Library where your search is saved. We’ll keep it under Personal, which is the default folder.
    1. Click Save.
  4. Your search is saved to the Library under your Personal folder. Let’s go see it.
    1. In the Sumo Logic menu, click Library.
    2. In the Personal folder, you see the search query you just saved, Apache Status Code Query. It uses a magnifying glass icon to denote it as a search.
    3. You also see the Training Demo Dashboard that we created.
    4. In the Uploaded Files folder, you’ll find the apache_access.csv file that we uploaded.
    1. And in the Apache folder, you’ll find that when you uploaded the log file using the Setup Wizard, it automatically installed the Sumo Logic App for Apache for you. We’ll come back to this app later.

Next, let’s use our saved search to create a Scheduled Search email alert.