Creating a Log Saved Search

• Console
• CLI
• API

• You can save the search parameters that you use for any searches performed in Basic Mode and Advanced Mode.

  To save a search:

  1. Open the navigation menu  and select Observability & Management. Under Logging, select Saved Searches.
  2. Under List scope, select a compartment that you have permission to work in.
  3. On the Saved Searches page, click New Search, which opens the Logging Search page, where you can begin a search.
  4. Apply filter and search settings as described in Basic Search Queries and Advanced Search Queries.
  5. Click Save search.
  6. In the New Saved Search panel, in Search Name, enter a name to associate with your saved search. Avoid entering confidential information.
  7. In Compartment, select the compartment that you want to create the saved search in.
  8. In Description, enter a description for the saved search.

  9. Click Save Search.

     The search is saved and a message appears with the linked name of the saved search.

     Click the saved search name to open the saved search details page with the Saved Search Information tab selected.

     The Tags tab shows tags associated with the saved search, and you can add or edit tags.

     Under Latest Results, log data is displayed. You can apply some simple filters, such as sorting by newest or oldest from the Sort field, or filtering by time from the corresponding Filter by time field.

     To view this saved search on the Search page directly, select Explore with Log Search from the Actions menu. The Search page opens with the saved search loaded, whether it's a basic or advanced search. You can perform more analysis and investigation related to this search directly on the Search page. For more information, see Logging Search.

  While on the Search page, you can also switch between any of the saved searches by selecting them from the Saved Searches list.

  Note
  
  When editing a saved search from the Saved Searches page, you can change the values in only the Search Name, Compartment, and Description fields in the Edit Saved Search panel. If you need to change the search parameters, create a new saved search.

• Use the oci logging log-saved-search create command and required parameters to create a log saved search:

  Command

  CopyTry It

  oci logging log-saved-search create --compartment-id compartment_ocid --log-query log_query --name name [OPTIONS]

  For a complete list of parameters and variable options for CLI commands, see the Command Line Reference.

• Run the CreateLogSavedSearch operation to create a log saved search.