Search Actions in FIM
You could always save a search query and make it readily available for use. You can view the frequently-used QQL queries, save, and manage them with ease. You can also create widgets from the frequently-used queries for easy reference in future.
Recent Searches: We save your last five search query history. You can quickly pick the search query from the list and use it without the need to build it from scratch. |
Save this Search Query: Enter your search query and then click Save this Search Query. |
Give your search a title. |
Click Manage Saved Searches to view all saved searches and easily manage all the saved search queries. Click a saved query to view the search results. |
Click Create Alert Rule from Search Query or Create Correlation Rule from Search Query to quickly build a rule from the search query you have built. |