Editing a saved search query

You can edit a saved search query you created. If you did not create the saved search query you cannot edit it.

Note
You cannot edit a scheduled search query that has already run once.

To edit a saved search query:

Locate the search in the list of saved search queries. See Listing saved search queries.
Click in the Option column. Select Edit.

In the Edit Search dialog, change the fields as needed.

Field	Description
Name	Specify a new name for the search query.
Private	Toggle the Private switch on to mark the query as a private search query. Private search queries are only visible to you and the organization admin.
Add to Favorites	Select Add to Favorites to make the search query accessible from the Favorites menu under the Search box.
Description	Change the description for the search.
Category	Change the search category. Possible selections are Investigation, Hunting, or Compliance. Categories provide a way for you to organize and filter your saved search queries.
Table Layout	Change the table layout using the drop-down menu in the Table Layout box underneath the search description.
Query	Change the search query. For more information about MQL queries, see the TQL Reference Guide.
Schedule Search	Change the search query schedule. See Scheduling a saved search.